Photo: RNZ / Finn Blackwell
Sexual violence and family harm victims will be living in terror that their private details could be among a cache of hacked medical information, an advocate says.
More than 400,000 files have been stolen from the Manage My Health platform.
It was a shocking data breach of highly sensitive information, independent advocate Claire Buckley said.
"The problem with that is that anybody who has used that system will now be vulnerable and potentially re-traumatised and potentially unnecessarily re-traumatised because their data may not be part of the hack. And so that's the harm that's being caused - it's not just to the people that have been hacked and whose data is vulnerable. It's also to anyone who uses that system whose data may not have been hacked, but they are living [with] the terror that it could have been.
"And I mean terror. People who have been through these kind of horrific traumas are not people who are feeling secure at the best of times. And so something like this, where their personal data could get out there is something that is more terrifying than to your average person who may have their medical records out there. There's a really big difference between, oh, 'did you know that this person was on statins?' versus, 'this person had an horrendous sexual assault, and they have permanent damage in this way', which would all be documented within those doctor's notes."
Buckley said abusive ex-partners could find their family's addresses, or other criminals could track down their victims.
"This kind of information may be able to lead their partners to find them, so that will be terrifying for them. And then anyone who's had any kind of severe trauma in the family relating to a homicide, for example, all of that's documented in their health records. Often they need counselling. And so all of those things are now going to be, you know, on the dark web, accessible to people who have the nefarious means to access that.
"And it's just so re-traumatising to anyone who's been through any kind of severe trauma, particularly one that may be ongoing in terms of a case that may still be pending and in terms of someone who is still trying to keep away from an abusive spouse."
A ransom deadline had been set for Tuesday and victims would have that at the front of their minds.
"Everyone who has been through that kind of trauma, whether it be family harm or sexual assault will be saying 'pay the ransom - it is completely worth it to protect my privacy'. And that's the problem. A lot of companies do pay it specifically to try and avoid the harm that can be caused.
"The problem, of course, is that the bad guys who are doing the hacking know that companies are willing to pay now because of the level of harm that they are causing. And so it becomes this kind of vicious cycle. If we pay them, then they know they can be paid. Therefore, they will keep trying to get into these systems and take the data for ransom again."
A worrying possibility would be that it could make people think twice about what they tell their doctor.
"And that would be the worst part of the situation, would be people who are in desperate need not wanting their information to be stored on the system. Because you can imagine if you have been the victim of a sexual assault and it is quite graphic in nature, you are not going to want your doctor to be documenting that in a system that is not considered reliable enough to ensure that your personal security and privacy is protected."
Manage My Health said late on Monday that the ransom demand was a matter for police, and it would not be making any comment about a ransom while an investigation was ongoing.
The platform apologised for pain and anxiety caused to health providers and patients, and acknowledged it could have communicated better.
"However, our priority was to secure patient data and work on the accuracy of all information before providing it to practices and patients."
It said it will publish daily updates with all the information it can share.
Health Minister Simeon Brown has announced an urgent review into the breach.
Where to get help:
- Need to Talk? Free call or text 1737 any time to speak to a trained counsellor, for any reason
- Lifeline: 0800 543 354 or text HELP to 4357
- Suicide Crisis Helpline: 0508 828 865 / 0508 TAUTOKO. This is a service for people who may be thinking about suicide, or those who are concerned about family or friends
- Depression Helpline: 0800 111 757 or text 4202
- Samaritans: 0800 726 666
- Youthline: 0800 376 633 or text 234 or email talk@youthline.co.nz
- What's Up: 0800 WHATSUP / 0800 9428 787. This is free counselling for 5 to 19-year-olds
- Asian Family Services: 0800 862 342 or text 832. Languages spoken: Mandarin, Cantonese, Korean, Vietnamese, Thai, Japanese, Hindi, and English.
- Rural Support Trust Helpline: 0800 787 254
- Healthline: 0800 611 116
- Rainbow Youth: (09) 376 4155
- OUTLine: 0800 688 5463
- Aoake te Rā bereaved by suicide service: or call 0800 000 053
If it is an emergency and you feel like you or someone else is at risk, call 111.
Sexual Violence
- NZ Police.
- Victim Support 0800 842 846.
- Rape Crisis: 0800 88 33 00.
- Rape Prevention Education.
- Empowerment Trust.
- HELP (Auckland): 09 623 1700, (Wellington): 04 801 6655.
- Safe to talk: 0800 044 334.
- Tautoko Tāne Male Survivors Aotearoa.
- Survivors Network of those Abused by Priests (SNAP) 022 344 0496.
Family Violence
- Women's Refuge: 0800 733 843.
- It's Not OK 0800 456 450.
- Shine: 0508 744 633.
- Victim Support: 0800 842 846.
- HELP Call 24/7 (Auckland): 09 623 1700, (Wellington): 04 801 6655.
- The National Network of Family Violence Services NZ has information on specialist family violence agencies.
Sign up for Ngā Pitopito Kōrero, a daily newsletter curated by our editors and delivered straight to your inbox every weekday.
