Manage My Health cyber incident: Conclusion of inquiry

Published: 4 November 2026

The second phase of the Office of the Privacy Commissioner's inquiry into the Manage My Health cyber incident has concluded. A recent media release from Te Whatu Ora | Health New Zealand outlines the phase two report does not identify any new privacy breaches by Te Whatu Ora and confirms the organisation met its legal obligations following the incident, including notifying the Privacy Commissioner and affected people.

Read the full media release.