Second NZ health provider, Canopy Health, reveals cyberattack - DataBreaches.Net
Briefly

Second NZ health provider, Canopy Health, reveals cyberattack - DataBreaches.Net
"A leading private provider doing breast cancer diagnosis and treatment took six months to notify some patients or the public of a major cyber attack on its systems. In an update on its website this week, Canopy Health - the largest private medical oncology provider in the country - said on 18 July 2025, it identified that an unknown person "temporarily obtained unauthorised access" to a part of its systems used by its administration team."
""Following a thorough forensic review by our cybersecurity experts, we have been advised that unauthorised access to one of our servers likely occurred, and some data may have been copied." The company, which runs 24 diagnostic clinics, eight oncology clinics, two private breast surgical centres and a drug compounding business, said the incident had been "contained" and the investigation was ongoing."
"In its FAQ on the incident, Canopy notes, "We also applied for and obtained an urgent injunction from the High Court to prevent use or publication of any information that may have been accessed and notified the NZ Police and the Office of the Privacy Commissioner.""
Canopy Health, the largest private medical oncology provider in New Zealand, identified unauthorised access to part of its administration systems on 18 July 2025. A forensic review concluded that unauthorised access to a server likely occurred and some data may have been copied. The organisation operates 24 diagnostic clinics, eight oncology clinics, two private breast surgical centres and a drug compounding business. The incident has been contained and the investigation is ongoing. Canopy obtained an urgent High Court injunction to prevent use or publication of any accessed information and notified the NZ Police and the Office of the Privacy Commissioner. Similar injunctions have been granted to Manage My Health and Neighbourly, prompting concern about press freedom and calls for government cybersecurity audits and fines for substandard security.
Read at DataBreaches.Net
Unable to calculate read time
[
|
]