What happened
In May 2021 a ransomware attack crippled the Waikato District Health Board, taking hospital IT systems offline for weeks and forcing procedures to be postponed [twowaikato]. Stolen patient and staff information was subsequently released to media and online [rnz-waikato]. The exact number of people affected was not officially quantified and is not estimated here.
Timeline
- 2021-05 — Ransomware attack; systems down across Waikato hospitals [twowaikato].
- 2021 — Stolen documents released publicly; NZ authorities engaged [rnz-waikato].
Current status
Resolved operationally. New Zealand’s Privacy Act carries limited civil-penalty powers, so no financial penalty followed. [twowaikato]
Why it matters
The most disruptive attack on a New Zealand hospital system to date — a case study in the operational and safety impact of health-sector ransomware, not just data loss.