ManageMyHealth Data Breach

Forums › Health and fitness › ManageMyHealth Data Breach

1 | ... | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | ... | 29

Awrrr
19071 posts

Uber Geek
+1 received by user: 16318

Lifetime subscriber

#3449988 5-Jan-2026 14:44

lurker:

@Rikkitic There's a FAQ linked on the main page that tries to answer all questions.

Where is it? I checked fairly carefully and didn't see anything. Could it have been posted after my visit earlier today?

Plesse igmore amd axxept applogies in adbance fir anu typos

Rikkitic

Awrrr
19071 posts

Uber Geek
+1 received by user: 16318

Lifetime subscriber

#3449989 5-Jan-2026 14:47

lurker:

@Rikkitic There's a FAQ linked on the main page that tries to answer all questions.

Never mind. I see it now. Not sure how I missed it. I might have just been staring at the login button. They should also have a link after login.

Plesse igmore amd axxept applogies in adbance fir anu typos

geek3001

221 posts

Master Geek
+1 received by user: 331

ID Verified

Subscriber

#3449991 5-Jan-2026 14:55

Rikkitic:

They should also have a link after login.

If the company is taking the matter seriously, once they have details of who's affected, they should have a message after logon clearly confirming to the user whether their data is or is not included in the leak.

Just emailing those that are affected is not enough.

Email delivery while normally reliable is not guaranteed.

Someone assuming they weren't affected due to no email telling them they were, may be the wrong assumption.

Rikkitic

Awrrr
19071 posts

Uber Geek
+1 received by user: 16318

Lifetime subscriber

#3449992 5-Jan-2026 15:00

geek3001:

Rikkitic:

They should also have a link after login.

If the company is taking the matter seriously, once they have details of who's affected, they should have a message after logon clearly confirming to the user whether their data is or is not included in the leak.

Just emailing those that are affected is not enough.

Email delivery while normally reliable is not guaranteed.

Someone assuming they weren't affected due to no email telling them they were, may be the wrong assumption.

In fact, there needs to be notification either way. Otherwise, if you are not affected, you are just left dangling as you wonder when you are going to hear something.

Plesse igmore amd axxept applogies in adbance fir anu typos

Munrog

6 posts

Wannabe Geek
+1 received by user: 8

#3449998 5-Jan-2026 15:21

gzt:
imd6662: So who's actually responsible? Is it the software provider? Is it the practice (and so perhaps your GP as the owner/director)? Or is it you?

Imo you're asking a legal question. To some extent that is defined by NZ privacy law and case law around duty of care. But no, it's not you, and there are many duties that parties cannot legally opt out of with crafty sign up EULAs although they may well try ; ).

MMH is private company. Not part of health NZ. Think you will find everyone running for cover, but ultimately a private company is where the buck stops in this case IMHO

duckDecoy

946 posts

Ultimate Geek
+1 received by user: 432

Subscriber

#3450003 5-Jan-2026 15:29

Rikkitic:

lurker:

@Rikkitic There's a FAQ linked on the main page that tries to answer all questions.

Never mind. I see it now. Not sure how I missed it. I might have just been staring at the login button. They should also have a link after login.

Where do you see this exactly? I must be going blind...

Apple TV

Stream your favourite shows now on Apple TV (affiliate link).

jarledb

Webhead
3319 posts

Uber Geek
+1 received by user: 1983

Moderator

ID Verified

Trusted

Lifetime subscriber

#3450004 5-Jan-2026 15:32

duckDecoy:

Where do you see this exactly? I must be going blind...

It is in the "hero" (top image) as the first button. Here is a direct link to the Cyber Breach FAQ

Jarle Dahl Bergersen | Referral Links: Want $50 off when you join Octopus Energy? Use this referral code
Are you happy with what you get from Geekzone? Please consider supporting us by making a donation or subscribing.

geek3001

221 posts

Master Geek
+1 received by user: 331

ID Verified

Subscriber

#3450005 5-Jan-2026 15:32

duckDecoy:

Where do you see this exactly? I must be going blind...

Top of the home page FAQs for Cyber Breach

duckDecoy

946 posts

Ultimate Geek
+1 received by user: 432

Subscriber

#3450010 5-Jan-2026 15:39

geek3001:

duckDecoy:

Where do you see this exactly? I must be going blind...

Top of the home page FAQs for Cyber Breach

Ahhh. The link I use to access the site (I assume it came from the doctor) is the login one. I wasn't going to their "main" homepage (which I didn't know existed). Wonder how many others are the same.

Rikkitic

Awrrr
19071 posts

Uber Geek
+1 received by user: 16318

Lifetime subscriber

#3450014 5-Jan-2026 15:53

duckDecoy:

Ahhh. The link I use to access the site (I assume it came from the doctor) is the login one. I wasn't going to their "main" homepage (which I didn't know existed). Wonder how many others are the same.

Yes, me too. That is why I didn't see it. This does nothing to improve their soiled reputation!

Plesse igmore amd axxept applogies in adbance fir anu typos

Rikkitic

Awrrr
19071 posts

Uber Geek
+1 received by user: 16318

Lifetime subscriber

#3450065 5-Jan-2026 16:06

So far, everything MMH has and has not done, makes me question their judgement and even their honesty. Clearly they are in damage control mode but they are handling it extremely poorly. They seem to be mainly concerned with arse covering and nothing about this gives me any sense of confidence in their competence or good intentions. I am not concerned by anything that might be in my records, other than just identity stuff like birth date, so will wait until it all settles. I will then request, probably without success, that my clinic stop using them.

Plesse igmore amd axxept applogies in adbance fir anu typos

Lego

Shop now for Lego sets and other gifts (affiliate link).

MikeB4

MikeB4
18776 posts

Uber Geek
+1 received by user: 12767

ID Verified

Trusted

Subscriber

#3450070 5-Jan-2026 16:13

I also believe that medical centers could have better comms regarding this. I have not received any information or advice from our medical center. Surely as partners with MMH they would have received briefings from their account managers at MMH. If they haven't that reflects very badly on the company and the centers should change to an alternative.

Here is a crazy notion, lets give peace a chance.

PolicyGuy

1821 posts

Uber Geek
+1 received by user: 1772

ID Verified

Lifetime subscriber

#3450090 5-Jan-2026 16:44

MikeB4:

I also believe that medical centers could have better comms regarding this. I have not received any information or advice from our medical center. Surely as partners with MMH they would have received briefings from their account managers at MMH. If they haven't that reflects very badly on the company and the centers should change to an alternative.

Firstly, many medical centres in NZ will have opened for business only today after their Christmas shutdown.

Secondly, they probably don't know:
My own medical centre has a MMH notice on their web front page, which leads to a statement saying "We will also contact you as soon as we know who has been affected, but at this time we have not yet been informed which of our patients have been affected, if any." [emphasis added]

MikeB4

MikeB4
18776 posts

Uber Geek
+1 received by user: 12767

ID Verified

Trusted

Subscriber

#3450096 5-Jan-2026 16:57

PolicyGuy:

MikeB4:

I also believe that medical centers could have better comms regarding this. I have not received any information or advice from our medical center. Surely as partners with MMH they would have received briefings from their account managers at MMH. If they haven't that reflects very badly on the company and the centers should change to an alternative.

Firstly, many medical centres in NZ will have opened for business only today after their Christmas shutdown.

Secondly, they probably don't know:
My own medical centre has a MMH notice on their web front page, which leads to a statement saying "We will also contact you as soon as we know who has been affected, but at this time we have not yet been informed which of our patients have been affected, if any." [emphasis added]

Our medical center has been open and only closed on Christmas Day and Boxing Day. My point is the medical center partners should have been advised immediately MMH became aware. MMH appear to have gone into fiscal damage control and given partners and users a much lower priority.

Here is a crazy notion, lets give peace a chance.

geek3001

221 posts

Master Geek
+1 received by user: 331

ID Verified

Subscriber

#3450097 5-Jan-2026 17:00

Rikkitic:

So far, everything MMH has and has not done, makes me question their judgement and even their honesty. Clearly they are in damage control mode but they are handling it extremely poorly. They seem to be mainly concerned with arse covering and nothing about this gives me any sense of confidence in their competence or good intentions. I am not concerned by anything that might be in my records, other than just identity stuff like birth date, so will wait until it all settles. I will then request, probably without success, that my clinic stop using them.

The company structure I mentioned earlier leaves me seriously questioning the effectiveness of governance at MMH.

Only three directors with one of them ultimately owning the company seems to me to be an inadequate structure for a company responsible for delivering a fairly critical health service directly to patients who for the most part have had this service forced upon them without any choice by the GP practice they attend.

I am struggling to find any public information as to their executive structure beyond the three listed directors. Do they have a Chief Information / Security Officer?

I appreciate this issue has unfolded during the annual closure of many IT related resources and may be affected by the telco's annual MAC brownout (for setting up an 0800 line plus staffing it etc) all of which may have made accessing the right resources challenging. NZ news outlets so far suggest that the government has chipped in with resources. The relatively poor response from the company is leaving me feeling increasingly uncomfortable about what is going on. Is this is going to evolve into the mother of all f-ups in terms of privacy breaches in NZ?

I really hope I'm wrong.

1 | ... | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | ... | 29