Update: Tuesday 13 January 2026
Dear patients,
This is an update on the cyber security incident involving unauthorised access toManageMyHealth (MMH) data.
MMH is a third-party patient portal system that allows our patients to view medical information through integration with our patient management system. This has been a valuable part of patients access to health information for over 10 years. We are extremely disappointed and concerned that the incident has occurred.
We have been advised by MMH that the incident relates only to documents under a specific function within MMH called Health Documents. This may include documents from:
– Hospital discharge documents from Northland Hospital
– specialist referral letters between 2017 and 2019
– Documents that users uploaded themselves to the ‘My Documents’ module
Aside from the above listed documents, MMH assure us none of the other data that we hold within our patient management system was accessed.
MMH advised us <1% of our patients will be affected. This may include situations where patients were not yet enrolled with Harley Street, but at another practice using MMH.
For those patients affected, MMH will be contacting you directly as they are the responsible holder for this information. These notifications are underway and should occur over the next few days. MMH will provide details of how more information and support can be accessed.
ManageMyHealth have also released a FAQ at https://managemyhealth.co.nz/faqs-cyber- breach/ to provide more information. We have been informed that an 0800 number will be available soon, however we do not have this information yet. You can contact ManageMyHealth directly via support@managemyhealth.co.nz in the meantime.
We intend to also contact our patients that we now know have been involved in the cyber incident. This will take place over Monday and Tuesday, so please be patient as we reach out, but we will be in touch by end of day Tuesday if you have been affected. We will provide as much information and support as possible.
At this stage we are continuing to have the MMH system available, as many of our patients rely upon this to view health information and records. The MMH system has been confirmed to be safe by external international experts and Health NZ. Our main priority at this time is to ensure your data is safe and you are informed, however we will be asking questions of MMH in the future and seeking reassurance to remain with them.
If you would like to close your MMH account, you can do so by signing into the MMH website, going to “My Account” and selecting option “Close Account.” MMH wait 90 days before permanently deleting your account information and all records.
We acknowledge the distress that this incident has caused for many patients and we share your concerns. We will continue to update the alert page on our website with any relevant information specific to our practice.
Thank you for your patience in this matter.
Management Team
Harley Street Medical
04 January 2026
Dear Harley Street Medical patients
The following information is for all our patients who use the Manage My Health NZ portal.
We recently became aware that our patient portal Manage My Health NZ has experienced a cyber security incident involving unauthorised access to Manage My Health NZ systems. Our immediate priority was to ensure your health information is safe and that the provider of Manage My Health NZ had secured the platform to prevent any further unauthorised access.
Manage My Health NZ advised they believe the unauthorised access is contained, the platform remains operational and that the incident is under active investigation. They have further strengthened their security, made logins more secure, and have re-secured all health documents.
On 3 January we received an update advising that independent cyber security and forensic specialists have provided confirmation to Manage My Health NZ that the current system environment is secure and operating as intended. Only one module of the app was affected, not the whole system.
Manage My Health NZ expect to start notifying those people directly affected from early next week. There will be dedicated support for users set up at the same time. We will post the 0800-support line and any other support tools as soon as they are available on our practice website.
What you can do
1. For peace of mind, we encourage all Manage My Health users to reset their password or enable two-factor authentication (2FA) where available including biometric measures, to add an additional layer of protection to their accounts. Here is the link to instructions to enable the two-factor authentication (you need to be logged in to access the link) – https://app.managemyhealth.co.nz/myaccount/two-step-verification
Supported Authenticator Apps:
Google Authenticator OR Microsoft Authenticator
2. Keep an eye out for anything unusual, such as medical bills or insurance claims you do not recognise, or unexpected letters from healthcare providers. If you see anything that looks odd to you, contact the relevant provider immediately. You can also report anything suspicious to the New Zealand Police at www.police.govt.nz and report any suspected scam calls or emails to CERT NZ via www.cert.govt.nz.
3. For more information, visit MMH FAQ’s page regarding the cyber breach here https://managemyhealth.co.nz/faqs-cyber-breach/
We are very aware of the anxiety and distress that incidents of this nature can cause especially around personal health information. We wish to assure you we are doing everything we can working alongside MMH and our IT team to minimise any potential risk for our patients.
Harley Street Management thank you for your patience in this matter. We will provide further updates as information becomes available to us.
Management Team
Harley Street Medical