Unauthorised data breach and attempt to spread misinformation

The investigation by Te Whatu Ora – Health New Zealand into the unauthorised disclosure of its data is making progress.

We are treating this very seriously and continue to expand resources, including international expertise in cyber security, for the investigative work. We have also brought in forensic expertise to help with the investigation and are beginning to better understand the nature of the information involved in this breach. The investigation is ongoing, and we can’t say anything more about the information at this stage.

We have liaised with the Office of the Privacy Commissioner throughout and are keeping them informed as we move through the process. In consultation with the Privacy Commissioner, Te Whatu Ora will make any appropriate notifications if individuals are impacted.

Alongside the work to identify the material allegedly disclosed by the individual, we have continued to pursue all avenues to take down the information if it reappears and appreciate the cooperation we have received from domestic and international platforms.

Police are continuing to investigate, and we are cooperating fully with them. We can’t comment any further on the proceedings before the court.

Alongside our operational response we are looking at our processes for data security and making any changes that are needed to further improve the security of information.

The misinformation about vaccines that has been put in the public arena in relation to our data is completely wrong. The person behind those claims was a data administrator with no clinical knowledge or expertise in vaccines.

Vaccination is safe and effective, and everyone should keep up to date with their shots to protect themselves, whānau, and their communities.