04 January 2026
Dear Harley Street Medical patients
The following information is for all our patients who use the Manage My Health NZ portal.
We recently became aware that our patient portal Manage My Health NZ has experienced a cyber security incident involving unauthorised access to Manage My Health NZ systems. Our immediate priority was to ensure your health information is safe and that the provider of Manage My Health NZ had secured the platform to prevent any further unauthorised access.
Manage My Health NZ advised they believe the unauthorised access is contained, the platform remains operational and that the incident is under active investigation. They have further strengthened their security, made logins more secure, and have re-secured all health documents.
On 3 January we received an update advising that independent cyber security and forensic specialists have provided confirmation to Manage My Health NZ that the current system environment is secure and operating as intended. Only one module of the app was affected, not the whole system.
Manage My Health NZ expect to start notifying those people directly affected from early next week. There will be dedicated support for users set up at the same time. We will post the 0800-support line and any other support tools as soon as they are available on our practice website.
What you can do
1. For peace of mind, we encourage all Manage My Health users to reset their password or enable two-factor authentication (2FA) where available including biometric measures, to add an additional layer of protection to their accounts. Here is the link to instructions to enable the two-factor authentication (you need to be logged in to access the link) – https://app.managemyhealth.co.nz/myaccount/two-step-verification
Supported Authenticator Apps:
Google Authenticator OR Microsoft Authenticator
2. Keep an eye out for anything unusual, such as medical bills or insurance claims you do not recognise, or unexpected letters from healthcare providers. If you see anything that looks odd to you, contact the relevant provider immediately. You can also report anything suspicious to the New Zealand Police at www.police.govt.nz and report any suspected scam calls or emails to CERT NZ via www.cert.govt.nz.
3. For more information, visit MMH FAQ’s page regarding the cyber breach here https://managemyhealth.co.nz/faqs-cyber-breach/
We are very aware of the anxiety and distress that incidents of this nature can cause especially around personal health information. We wish to assure you we are doing everything we can working alongside MMH and our IT team to minimise any potential risk for our patients.
Harley Street Management thank you for your patience in this matter. We will provide further updates as information becomes available to us.
Management Team
Harley Street Medical