21 Jan 2026

Privacy Commissioner announces inquiry into Manage My Health cybersecurity breach

7:26 pm on 21 January 2026
Secretary of the Cabinet and Clerk of the Executive Council Michael Webster stands for the National Anthem

Privacy Commissioner Michael Webster. Photo: VNP / Phil Smith

The Privacy Commissioner has announced an inquiry into the Manage My Health cybersecurity breach.

Michael Webster said it is clear a privacy investigation is needed given the scale of the incident, the sensitivity of the information and some of the systemic issues that were identified.

He said the inquiry will help determine whether Manage My Health had appropriate security safeguards and, if not, why not.

It will also look at what steps will be taken to prevent such an incident happening again.

At the end of December Manage My Health confirmed it had been hacked, later revealing that information of about 120,000 users could be affected.

Sign up for Ngā Pitopito Kōrero, a daily newsletter curated by our editors and delivered straight to your inbox every weekday.

Get the RNZ app

for ad-free news and current affairs