Manage My Health (MMH) Cyber Incident – QMC Patient Update #2
QMC's response to this incident and what we know so far.
Manage My Health (MMH) Cyber Incident – QMC Patient Update #2
Published: 8 January 2026 (Update #2)
The breach of MMH’s health documents module occurred on 30 December 2025, and as of the morning of 8 January 2026, our patients have not yet received confirmation from MMH regarding whether their data has been breached or not.
At the time of publishing this blog, we became aware that some patients are able to see their breach status within the app by logging in as normal, though others had not received notification, nor were able to see their breach status within the app.
We are increasingly disappointed with the slow pace of communication and lack of clarity from MMH to patients regarding whether their data was affected.
We are working closely with Wellsouth (our Primary Health Organisation) to apply pressure to Manage My Health. Despite these efforts, we are not seeing the progress we would like to see.
As a result, we are currently reviewing all options available to us with regards to our patient portal.
The plan from MMH
MMH have confirmed as of yesterday (7 January 2026) that they would begin notifying affected patients within 24 hours, and it could take up to five days to communicate with all patients.
Our understanding is that MMH will reach out to patients via email (the email they registered MMH with) and then direct them to the portal to see which documents have been breached, or, if the patient is unaffected, we understand that the plan is they will see a green tick within the portal to indicate their data has not been breached.
If you are affected
If you are affected by this breach, Manage My Health will contact you via email. An 0800 helpline will be established for patients to contact if their data has been breached and need further clarification and/or support from MMH.
Affected patients are welcome to book in for a free 30-minute consultation with one of our Health Improvement Practitioners who can support you. Please call us on 03 441 0500 if you would like to book an appointment.
QMC’s response so far
- MMH states the incident is contained and the platform has been independently verified as secure to continue using.
- On becoming aware of the incident, QMC took the following action:
- We immediately engaged our IT provider to check and confirm QMC systems remain secure and unaffected
- We reviewed our cybersecurity protocols and monitoring
- As an extra precaution, we have stopped sending consultation notes and lab results from our patient management system to MMH while investigations progress.
Using Manage My Health
Manage My Health have stated the platform is safe to use after an independent verification from a cybersecurity expert.
You can continue using MMH for bookings, repeat prescriptions, and messaging.
Can I close my MMH account?
This is entirely your decision. MMH have said they will communicate via the app, so if you choose to close your account, it may mean that you need to call MMH if you receive an email from them.
How: Log in to the MMH app or website → go to My Account → choose Close Account.
QMC can also close your account for you. Please get in touch if you would like us to help you with this.
Practical security tips (quick wins)
- Change your MMH password and avoid re‑using it on other sites.
- Enable MFA using an authenticator app. See steps below for how to do this.
- Be alert to scams and phishing: Don’t click unknown links; report suspicious emails, calls, or messages.
MFA Steps
MFA adds a second check (a code) when you log in, which makes your account much harder to compromise.
- Open MMH (app or browser) and sign in.
- Go to Profile / Account → Security (or Two‑Factor Authentication).
- Choose an Authenticator app (e.g., Google Authenticator or Microsoft Authenticator).
- Scan the QR code or enter the setup key shown on MMH.
- Enter the 6‑digit code from your app to confirm setup.
- From now on, you’ll enter your password and a fresh code from the app each time you log in.
MMH has confirmed support for Google and Microsoft Authenticator apps and encourages enabling 2FA/MFA.
App now redirecting to web browser
Some patients have noticed that logging in via the MMH app now redirects them to a web browser.
MMH have explained that this redirection is so they can install some updates to allow them to show whether a patient has been breached, directly in the appt.
Important reminders and links
Manage My Health will soon release details of an 0800 number for affected patients. At the time of writing, it was not yet available.
Patients contact: info@managemyhealth.co.nz
FAQs: https://managemyhealth.co.nz/faqs-cyber-breach/
News statements from Manage My Health: https://managemyhealth.co.nz/faqs-cyber-breach/
We hope this information is helpful. We will continue to keep patients updated on our website as and when more information becomes available to share.
Why choose to enrol at QMC
- Our large team of doctors and nurse practitioners means high availability at short notice
- Subsidised fees for consultations in pre-booked appointments
- Discounted fees for our After Hours & Urgent Care clinic
- Children under 14 years old are entitled to free consultations
- Shorter than national average wait times in After Hours & Urgent Care
- 3 practice locations across Queenstown
Access to all 3 locations
As an enrolled patient, you can be seen at any of our three clinics located centrally in Queenstown, Jack's Point and Remarkables Park.