"One of the country's largest patient information portals, Manage My Health, today confirmed the first 50% of up to 126,000 patients affected by a data breach had been notified. The privately-operated patient portal, used by some general practices around New Zealand, earlier this week confirmed it had identified a cyber security incident involving "unauthorised access" to the "My Health Documents" module in the app late last year."
"As of publication, Manage My Health's most recent update on the incident was January 5. But since then, there has been an important development: the threat actor who claimed responsibiity for the attack, "Kazu," removed the listing and data sample from their Telegram channel and dark web leak site. Although Kazu has not publicly confirmed that they received any payment, their actions suggest that either they regretted the attack or were paid. DataBreaches thinks it is more likely that they received a payment."
Manage My Health confirmed it notified the first 50% of up to 126,000 patients affected by an unauthorized access incident targeting the My Health Documents module late last year. Notifications were sent to email addresses used to register accounts. Stolen data originated predominantly from Northland, affecting about 45 general practices and including clinical discharge summaries and historical referral records six to eight years old. An additional 355 referral-originating GP practices across multiple regions and patient-uploaded personal health information were also affected. The threat actor 'Kazu' removed a listing and data sample from their Telegram channel and dark web leak site, and their actions suggest possible payment.
Read at DataBreaches.Net
Unable to calculate read time
Collection
[
|
...
]