Office of the Privacy Commissioner | Statement on Manage My Health cyber incident
We can confirm that Manage My Health notified the Privacy Commissioner of a cyber incident involving unauthorised access to the Manage My Health platform on 1 January 2026. We are currently supporting Manage My Health as they work through containing and investigating the breach, and identifying and notifying impacted users.
Information for those impacted by the Manage My Health cyber incident
Manage My Health have issued a statement indicating that the cyber incident impacts around 6-7 percent of their 1.8 million registered users.
If you have used the Manage My Health website and are concerned about how this incident may impact you, please first check the Manage My Health website for answers to frequently asked questions and access to news and updates. They are currently working through how to notify impacted users and will post this information on their website. It is Manage My Health’s responsibility to notify and to support impacted users.
If you wish to make a privacy complaint about Manage My Health you must first lodge a complaint directly with Manage My Health and give them an opportunity to respond (usually 20 working days). This can be done by emailing their privacy officer on nzsupport@mmhglobal.com. If you are not satisfied with their response and you believe that your privacy has been harmed, you can use our online complaint form to make a complaint to the Privacy Commissioner.