Cyber attack: Patient details could be compromised

Health Minister Andrew Little says the cyber attack is being investigated. Photo: RNZ / Samuel Rillstone.

A large North Island GP network has been hit by a cyber attack, with patient details potentially compromised.

The attack, which took place on September 28, has hit Pinnacle Midlands Health Network's regional primary health care practices across Taranaki, Rotorua, Taupō-Tūrangi, Thames-Coromandel and Waikato.

Pinnacle does not hold information like GP notes, but does hold personal information such as names, addresses and National Health Index (NHI) numbers.

In a statement today, the company says the affected IT was immediately taken offline and contained.

But Pinnacle Incorporated chief executive Justin Butcher says it appears the hackers had accessed information, which could include commercial and personal details, from the system before the breach was notified.

"At this point in time, we cannot confirm what specific data or information may have been accessed, but we are working through a process to better understand that," says Butcher.

"This will take time, however, we believe it is important to disclose this incident now, so we can support those people who have potentially been impacted."

External support partners came onboard to contain the incident and an investigation alongside authorities had been launched, he says.

"We have also laid a complaint with the police and are working alongside Te Whatu Ora and a number of other government agencies.

"We have put contingency plans in place and are working to understand exactly what happened and who has been impacted.

"We have notified the Office of the Privacy Commissioner."

While affected practices will continue to provide services, some patients might experience delays in contacting them, he says.

A freephone support line is expected to be set up for people wanting further information.

Health Minister Andrew Little says the incident is being investigated.

-RNZ.

1 comment

One of the threats...

Posted on 05-10-2022 18:18 | By morepork

... with personal detail ransomware is that the hackers will publish details they have stolen. ALL senstive information in publicly accessible systems (particularly Health...) SHOULD be encrypted automatically before being stored in the system. This renders half of the threat pointless. And yet, many health packages don't implement it... (Probably believing they can't be hacked...)


Leave a Comment


You must be logged in to make a comment.