Back to overview
Managemyhealth logo
managemyhealth.co.nz
Managemyhealth
Confidence MediumJan 12, 2026managemyhealth.co.nz

New Zealand's Manage My Health acknowledges cyberattack

PatternExternal actor · Error · Confidentiality impact

Manage My Health, New Zealand's largest patient portal, acknowledged a cyberattack on January 12, 2026, that occurred in December 2025. The incident potentially exposed sensitive data of nearly 110,000 users. An alleged attacker, dubbed 'Kazu,' claimed responsibility and demanded a $60,000 ransom. The New Zealand government ordered an investigation into the health data leak.

Signal date
Jan 12, 2026
Updated
Jun 25, 2026
Confidence
Medium
Sources
1 source
managemyhealth.co.nz logo

Managemyhealth

Sector
Health Care and Social Assistance
Signals
1 linked

Signal context

First seen: Jan 12, 2026

Last updated: Jun 25, 2026

Status: Public signal

Key points

  • Cyberattack occurred in December 2025, acknowledged January 12, 2026.
  • Potentially exposed data of nearly 110,000 users.
  • Attacker 'Kazu' claimed responsibility and demanded a $60,000 ransom.

Signal analysis

Beta

This analysis groups the signal by industry, likely incident action and impacted security area. It helps compare this signal with other published signals without treating the labels as final determinations.

Affected organization
Managemyhealth logo
Managemyhealth

Sector: Health Care and Social Assistance

Likely country: Location not provided

Estimated
Threat source
Error activity

Watch process controls, misconfiguration and accidental disclosure paths.

  • Source type: outside the affected organization
Business impact
Potential data exposure

Impact area: Confidentiality

Likely asset: User or customer data

Trend context
12 signals with similar action pattern
  • 6 signals in the same sector
  • 90 signals with the same likely impact area
  • 1 signal linked to this organization/domain
Mentioned entities
ManagemyhealthData DisclosureNew ZealandManage My HealthKazuThe New ZealandCyberattackPotentiallyAttacker

External sources

Related signals

Grouped by why the signal is relevant.

dialog.org logoDialogJun 27, 2026
Same action patternSame impact area

Peter Thiel's Dialog Society Data Leak Exposes Senior US Officials

A data exposure at Dialog, a private events group co-founded by Peter Thiel, unmasked personal information and login tokens for US and allied national security figures. The incident, which Dialog internally classified as a cyberattack but evidence suggests was a website misconfiguration, exposed private details of 222 registrants for its 2026 retreat, including names, private contact details, active login tokens, and internal ratings.

huntsvillehospital.org logoHuntsvillehospitalJun 26, 2026
Same sectorSame impact area

Huntsville Hospital Health System Notifies Patients of Data Exposure from Cerner Breach

Huntsville Hospital Health System informed patients on June 26, 2026, about a data exposure stemming from a 2025 breach on Cerner's (now Oracle Health) legacy systems. The breach, which occurred on January 22, 2025, exposed personal and medical information. Cerner had notified its healthcare clients, including Huntsville Hospital, on August 12, 2025, but patient notification was delayed at the request of law enforcement.

viennaairport.com logoViennaairportJun 23, 2026
Same action patternSame impact area

Vienna Airport Targeted in APT73/Bashe Ransomware Attack

The ransomware group APT73/Bashe claimed responsibility for a cyberattack against Vienna Airport (Flughafen Wien AG) on June 23, 2026, threatening to leak sensitive data. The airport acknowledged a limited leakage of old cargo-related files from one email inbox but denied a broader system compromise.

meta.com logoMetaJun 23, 2026
Same action patternSame impact area

Meta Suspends Internal AI Program After Employee Data Leak

Meta suspended its internal AI program, 'Model Capability Initiative' (MCI), after a data leak exposed sensitive employee information. The program, designed to train AI models, recorded mouse movements, clicks, keystrokes, and took screenshots of employee activity. Problems with data storage were reported in May, leading to the suspension and an ongoing investigation. The incident was publicly reported on June 23, 2026.

whise.eu logoWhiseJun 23, 2026
Same action patternSame impact area

Whise.eu (European Real Estate CRM) Data Leak by ChimeraZ

The threat actor ChimeraZ claimed to have leaked a database from Whise, a Belgian CRM system for the real estate sector, on the dark web on June 23, 2026. The leaked data reportedly consists of 40.85 million records, approximately 15.8 GB of JSON files. Whise is a market leader in Belgium and also active in France.

aclapc.com logoAclapcJun 23, 2026
Same sectorSame impact area

ACLA Data Breach Exposes Social Security Numbers and Medical Information

Anatomic and Clinical Laboratory Associates P.C. (ACLA) disclosed a data breach involving unauthorized access to its computer network. The breach, discovered in December 2025, exposed personally identifiable information (names, dates of birth, Social Security numbers, taxpayer identification numbers) and protected health information (medical dates of service, diagnoses, medical history) for 69 Massachusetts residents.