Manage My Health security incident

Unfortunately a key health app has been attacked and over 2 million New Zealanders may have had their personal details leaked to cyber criminals.

The Manage My Health team have engaged third party incident response specialists and are posting regular updates on their website. The media are working to ensure as many New Zealanders as possible are aware of the security incident so they can take steps to protect themselves as much as possible. Users should stay up to date with how the incident progresses. Nothing much can be done, until it is understood how much data has been accessed and/or stolen.

An action is for users of ManageMyHealth to log in and change their password - to something unique and strong (for details on what is unique and strong, see the NCSC guidance).

The next step, while users are logged in, is to set up two-factor authentication (if you haven’t already).

When you have logged in, go to the Profile icon in the top right hand corner. Select Security and scroll to the two-factor authentication section to work through the steps in enabling it. It is best to download an ‘Authenticator’ app to your phone and use that method. This can be used for many other internet accounts to ensure good security across them, so it is a good application to have on your mobile phone. Own you own online by NCSC have guidance on this too.

For any additional cyber expert opinions, please email our spokespersons via media@ nzitf.org.nz