New Zealand orders review into ManageMyHealth cyberattack

ManageMyHealth, a New Zealand private healthcare records platform serving ~1.85 million people, suffered a cyberattack in which an adversary known as “Kazu” claims to have exfiltrated over 428,000 files and demanded a $60,000 ransom; snippets of highly sensitive data (passport scans, medical details, images) were released, potentially affecting an estimated 100,000 patients. The company says the incident is contained and is working with independent forensics, the Privacy Commissioner, police and Health New Zealand while pursuing legal steps to prevent further dissemination; users are advised to change passwords and enable MFA.