January 7, 2026 • 5 mins
More details are emerging about data compromised in the Manage My Health portal breach.
The privately-owned platform has started notifying affected GP clinics.
College of GPs President Luke Bradford says much of the information is eight to nine years old.
He told Andrew Dickens Northland appears to be the most-affected region.
Bradford says although it doesn't have anything to do with Whangārei Hospital, it seems be predominantly files out of its systems.
He told Dickens they mostly don't appear to include lab results, medicines, or notes of personal conversations with doctors.
Bradford says they've been told its inwards letters, predominantly coming from specialist appointments in the hospital system.
LISTEN ABOVE
See omnystudio.com/listener for privacy information.
Mark as Played
Transcript
Episode Transcript
Available transcripts are automatically generated. Complete accuracy is not guaranteed.
Speaker 1 (00:09):
You're listening to a podcast from News Talks ed B.
Follow this and our wide range of podcasts now on iHeartRadio.
Speaker 2 (00:16):
The first patients whose data has been compromised by the
Manage My Health Data leak have now started to be
officially notified. Affected patients have expressed some frustration with the
company around the mixed messaging and the uncertainty and the
delays in notification, and the curious thing is all the
threats by the hacker group KAZ, who have now mysteriously
(00:37):
disappeared offline. So I'm joined by the Raw New Zealand
College of GP's president, doctor Luke Bradford to talk about
it and where we're at. And Luke, good morning to you.
Speaker 3 (00:46):
Good morning Andrew.
Speaker 2 (00:47):
So we're getting a little bit of stuff. I know
of forty five places in northern that have been affected.
I know of a place Johnson Will have been affected.
And how many GP clinics through the nation have been affected, Oh,
I don't.
Speaker 3 (01:01):
Have the exact number. And I'm afraid what's happened so
far is that out of the last two days three
days is the practices of stuff to be informed if
some of their patients are involved, and that's I believe
on the request that the practices checked to see what's
happening with those patients now, things like it's a patient's
still alive because a lot of this data is old.
(01:21):
It's sort of eight years nine years old, and so
there's a little bit of that going on. We know
that Northland is the most affected region. It seems to
be predominantly around files out of the songer Ay hospital systems.
Not it's got anything to do with songer A Hospital.
It's entirely to management health system, but that seems to
be where the bowlk are.
Speaker 2 (01:42):
However, GPI clinics feeling.
Speaker 3 (01:43):
Are they angry, Yeah, yeah, absolutely because there was trust
in the company and frustration and look, a cyber crime happens,
it happens internationally, and so we have to acknowledge that.
But the you know, we're day eight now, we've still
not got patients being told that's going to start happening today.
We believe there's very little clarification over what's happening with
(02:05):
that data, what the risk is, and what's happening in
terms of shutting down this process.
Speaker 2 (02:11):
What sort of types of patient data have been compromised.
I read somewhere it's just documents as opposed to lab
results and GP notes. It's documents. Can you tell me
what has been leaked?
Speaker 3 (02:24):
Yeah, so the specifics now, I don't know, but you're right.
It is documents, so we do know it is stuff
from twenty seventeen through twenty nineteen predominantly, is what we've
been told. And we've been told also that it's letters
in so it's stuff that has come from specialist appointments
through the hospital system predominantly. So you're right. Not lab
results and not mentioned are not that real personal conversation
(02:47):
with the doctor's stuff, which is at least a some relief.
Speaker 2 (02:51):
So that is some relief. Does that mean you might
think that perhaps paying the one hundred and grand just
to you know, just to get this over and done
with would be okay, or even not paying it because
the leak of documents might not be as damaging as
we imagined.
Speaker 3 (03:06):
Yeah, and that's that whole you know, Robin hard place,
isn't it? Is it? Do you pay and then encourage
them to come back for more or go and take
more the whole hostage situation. I am of that about view,
but it is difficult to see other than the feeling
of violation. What can be done with these documents? You know,
people aren't going to publish what's on them as an
(03:27):
injunction against it, and people are too you know, media
and stuff wouldn't touch up with a bar part. So
I think it's that sense of violation that the stuff
that you've always held as very close to you is
out there on the market trying to hawk us to
us to a buyer.
Speaker 2 (03:45):
Now, look, don't worry. The media wone purposes, but the
social media is a wild way, so there's a concern there.
It could still get out there and be in the
community and no matter what injunction is around the place.
Does the disappearance of the threats online make you feel
more comfortable? What does it actually make you think? It
get a bit more injy.
Speaker 3 (04:04):
Yeah, there's no sign, there's no official word from from
New Zealand end about why they've disappeared, does it? So?
I don't think it adds a lot of comfort. I
think we probably just need some kind of statement as
to what is happening there.
Speaker 2 (04:17):
Yeah, it might be some sort of negotiation thing between management,
Health and CASU, you know, So, okay, I'll pull it
down temporarily, but the threat is still there at the
end of the day, right now today, would you recommend
GP clinics you ever use Manage my Health Again?
Speaker 3 (04:33):
As I've said all along through this, the use of
the portal is incredibly helpful clinically for the patients and
the practices. I think there's going to have to be
a huge amount of confidence rebuilding if practices are going
to go on continue to use Manage my Health. The
practice management systems that use most of my health are
(04:54):
going to have to come in and either offer a
very strong alternative or show that Manage my Health has
been fully rebuilt and is protectable. But we have to
keep on using portals because they're really really important tools.
Speaker 2 (05:07):
Good stuff, Grayford to thank you for your time, Doctor
Luke Braford as the President of the Royal New Zealand
College of General Practitioners.
Speaker 1 (05:15):
For more from News Talks at b listen live on
air or online, and keep our shows with you wherever
you go with our podcasts on iHeartRadio.
You're listening to a podcast from News Talks ed B.
Follow this and our wide range of podcasts now on iHeartRadio.
Speaker 2 (00:16):
The first patients whose data has been compromised by the
Manage My Health Data leak have now started to be
officially notified. Affected patients have expressed some frustration with the
company around the mixed messaging and the uncertainty and the
delays in notification, and the curious thing is all the
threats by the hacker group KAZ, who have now mysteriously
(00:37):
disappeared offline. So I'm joined by the Raw New Zealand
College of GP's president, doctor Luke Bradford to talk about
it and where we're at. And Luke, good morning to you.
Speaker 3 (00:46):
Good morning Andrew.
Speaker 2 (00:47):
So we're getting a little bit of stuff. I know
of forty five places in northern that have been affected.
I know of a place Johnson Will have been affected.
And how many GP clinics through the nation have been affected, Oh,
I don't.
Speaker 3 (01:01):
Have the exact number. And I'm afraid what's happened so
far is that out of the last two days three
days is the practices of stuff to be informed if
some of their patients are involved, and that's I believe
on the request that the practices checked to see what's
happening with those patients now, things like it's a patient's
still alive because a lot of this data is old.
(01:21):
It's sort of eight years nine years old, and so
there's a little bit of that going on. We know
that Northland is the most affected region. It seems to
be predominantly around files out of the songer Ay hospital systems.
Not it's got anything to do with songer A Hospital.
It's entirely to management health system, but that seems to
be where the bowlk are.
Speaker 2 (01:42):
However, GPI clinics feeling.
Speaker 3 (01:43):
Are they angry, Yeah, yeah, absolutely because there was trust
in the company and frustration and look, a cyber crime happens,
it happens internationally, and so we have to acknowledge that.
But the you know, we're day eight now, we've still
not got patients being told that's going to start happening today.
We believe there's very little clarification over what's happening with
(02:05):
that data, what the risk is, and what's happening in
terms of shutting down this process.
Speaker 2 (02:11):
What sort of types of patient data have been compromised.
I read somewhere it's just documents as opposed to lab
results and GP notes. It's documents. Can you tell me
what has been leaked?
Speaker 3 (02:24):
Yeah, so the specifics now, I don't know, but you're right.
It is documents, so we do know it is stuff
from twenty seventeen through twenty nineteen predominantly, is what we've
been told. And we've been told also that it's letters
in so it's stuff that has come from specialist appointments
through the hospital system predominantly. So you're right. Not lab
results and not mentioned are not that real personal conversation
(02:47):
with the doctor's stuff, which is at least a some relief.
Speaker 2 (02:51):
So that is some relief. Does that mean you might
think that perhaps paying the one hundred and grand just
to you know, just to get this over and done
with would be okay, or even not paying it because
the leak of documents might not be as damaging as
we imagined.
Speaker 3 (03:06):
Yeah, and that's that whole you know, Robin hard place,
isn't it? Is it? Do you pay and then encourage
them to come back for more or go and take
more the whole hostage situation. I am of that about view,
but it is difficult to see other than the feeling
of violation. What can be done with these documents? You know,
people aren't going to publish what's on them as an
(03:27):
injunction against it, and people are too you know, media
and stuff wouldn't touch up with a bar part. So
I think it's that sense of violation that the stuff
that you've always held as very close to you is
out there on the market trying to hawk us to
us to a buyer.
Speaker 2 (03:45):
Now, look, don't worry. The media wone purposes, but the
social media is a wild way, so there's a concern there.
It could still get out there and be in the
community and no matter what injunction is around the place.
Does the disappearance of the threats online make you feel
more comfortable? What does it actually make you think? It
get a bit more injy.
Speaker 3 (04:04):
Yeah, there's no sign, there's no official word from from
New Zealand end about why they've disappeared, does it? So?
I don't think it adds a lot of comfort. I
think we probably just need some kind of statement as
to what is happening there.
Speaker 2 (04:17):
Yeah, it might be some sort of negotiation thing between management,
Health and CASU, you know, So, okay, I'll pull it
down temporarily, but the threat is still there at the
end of the day, right now today, would you recommend
GP clinics you ever use Manage my Health Again?
Speaker 3 (04:33):
As I've said all along through this, the use of
the portal is incredibly helpful clinically for the patients and
the practices. I think there's going to have to be
a huge amount of confidence rebuilding if practices are going
to go on continue to use Manage my Health. The
practice management systems that use most of my health are
(04:54):
going to have to come in and either offer a
very strong alternative or show that Manage my Health has
been fully rebuilt and is protectable. But we have to
keep on using portals because they're really really important tools.
Speaker 2 (05:07):
Good stuff, Grayford to thank you for your time, Doctor
Luke Braford as the President of the Royal New Zealand
College of General Practitioners.
Speaker 1 (05:15):
For more from News Talks at b listen live on
air or online, and keep our shows with you wherever
you go with our podcasts on iHeartRadio.
Popular Podcasts
Dateline NBC
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com
Stuff You Should Know
If you've ever wanted to know about champagne, satanism, the Stonewall Uprising, chaos theory, LSD, El Nino, true crime and Rosa Parks, then look no further. Josh and Chuck have you covered.
The Breakfast Club
The World's Most Dangerous Morning Show, The Breakfast Club, With DJ Envy, Jess Hilarious, And Charlamagne Tha God!