Mike: Victim of the Manage My Heath data breach on the handling of the situation

It’s been ten days since Manage My Health was the victim of a data breach that involved over 100,000 Kiwis. 

Last night the company confirmed that half of the affected patients had been contacted, leaving tens of thousands of people still uncertain.  

Meanwhile, it’s been revealed that the Privacy Commission was aware of the security vulnerabilities as of six months ago. 

One of those who had his data leaked, Mike told Andrew Dickens his concern is less about his medical information being leaked, but rather his personal details. 

He says he’s not sure what data has been leaked, but things like his name, date of birth, NHI number, and potentially his address may all be compromised, which could be used in dangerous ways. 

LISTEN ABOVE 

See omnystudio.com/listener for privacy information.

Episode Transcript

Speaker 1 (00:09):
You're listening to a podcast from News Talks be follow
this and our wide range of podcasts now on iHeartRadio.

Speaker 2 (00:16):
Now, it's been ten days since Manage my Health was
the center of a data breach that involved over one
hundred thousand kiweks. Last night, the company confirmed that half
of affected patients have been contacted, leaving tens of thousands
still uncertain. I haven't been, my partner has. Meanwhile, it's
been revealed that the Privacy Commission knew of the security
vulnerabilities have Managed my Health six months ago. Now Mike

(00:41):
is one of the patients who's had his data leaked,
and he joins you now, goodbrding to you.

Speaker 3 (00:46):
Mike.

Speaker 2 (00:48):
My first question, have you been contacted directly by Managing
my Health yet?

Speaker 3 (00:54):
An email finally arrived yesterday?

Speaker 2 (00:56):
Okay, Yeah, have you been contacted by your GP?

Speaker 3 (01:01):
No? No, I know you that you've been clinking on
this along with other people, but it's quite appalling about
how long it's taken that you It was only yesterday
afternoon that I got a notification and that was only
an email notification that from Manage my Health.

Speaker 2 (01:18):
Okay, And so you would say that's not good enough.
In fact, you already have.

Speaker 3 (01:23):
Yes, yeah, you know it's a bit of calling. And
in the fact that you know, when the story broke
you didn't hear from the organization or your GP. You
actually heard from the media first, which yes, isn't the best.

Speaker 2 (01:35):
Are you worried about your medical your medical stuff being
out in public.

Speaker 3 (01:42):
Not so much. Obviously it's not ideal for not but
you know, am I less concerned about the fact that
somebody knows I hurt my knee playing sport?

Speaker 1 (01:51):
No?

Speaker 3 (01:52):
What I am concerned about, as you were saying an intro,
that you know, along with those medical records, there's a
lot of information there there there's my data birth, there's
my full name, there's the NHI I number. I'm not
sure how much you could do with that, but also
my address possibly in the documents, so you know, identity
to me, things like identity theft are more of a

(02:15):
concern than the fact that somebody knows, you know, I've
got a prescription or of hurt my knee or something
like that.

Speaker 2 (02:21):
And how does that concern you? The identity death.

Speaker 3 (02:26):
Yeah, well, well that's the thing. You know, I don't
know what data they have, what's been leaked and Therefore,
how could that be used. You know, it could be
used to impersonate you when somebody could go out and
get alone potentially. I know you think about so many
times in life when you're trying to do something, what
are the security checks? You know, what's your full name,

(02:46):
what's your address, what's your data birth? Well, actually possibly
they have all those things.

Speaker 2 (02:51):
Now, how would you feel about ever using management health.

Speaker 3 (02:54):
Again, Yeah, it's one of those double edged swords things
because I do use it obviously I have. It is
very handy for finding out your medical results, you know,
rather than eating from a call or text when a
medical center. You know, if you're on a prescription, I
understand it's going to actually you'll repeat prescriptions through that.

(03:16):
So from running your life perspective is very it's a
very good tool. I would have big concerns now about
and manage my health. You know, yes, they could do
more things like two factor authentication, et cetera, but we

(03:36):
don't know how they were actually securing those records and
the data and what information was encrypted or not encrypted
in the system. So something back into the system as
clearly as a whole we've been able to do that,
you know, will this happen again, and that's the think
better trust she really is, isn't it.

Speaker 2 (03:54):
The very important lesson in business is once bitten, twice shy,
so it won't be good for their reputational thing. Mike,
I thank you so much.

Speaker 3 (04:04):
Yeah, and thank you for you know, I had heard,
you know, some people saying why why is the media
going on about this? But I think, you know, it
is important, and you know, we need the pressure from
the media to get some of these questions. And I
would say I still don't fully understand what my data
has been taken, just that.

Speaker 2 (04:23):
It has been all right, Mike, and I thank

Speaker 1 (04:26):
You for more from News Talks ed B listen live
on air or online, and keep our shows with you
wherever you go with our podcast on iHeartRadio.