What happened
In February 2024 Health New Zealand disclosed that an individual had taken data from its systems and attempted to spread misinformation, with the personal information of around 12,000 people — relating to COVID-19 vaccination records — involved [twora-hnz] [onenews-hnz]. Health NZ notified affected people and referred the matter to authorities.
Timeline
- 2024-02 — Health NZ disclosed the unauthorised data breach; ~12,000 people affected [twora-hnz].
Current status
Resolved, with notification and referral to authorities. Figures are as reported. [twora-hnz]
Why it matters
An insider case — the risk isn’t only external attackers; trusted access to sensitive health data can be misused from within.