Manage My Health Cyber Breach General Practice Resources

 

WellSouth MMH Practice latest Drop-in Hui Recordings:

Latest drop-in, Manage My Health Cyber Info Drop in Session 29

 Jan, 2026 

These are hosted by WellSouth COO Damon Campbell. 

Where to find information on MMH

Practices with affected patients will receive an email from MMH. The Patient data is then available on the MMH platform - Secure Provider Portal – Reports – Report 20 (20 includes any patients from Northland who may have enrolled with you). Please note the list of affected patients may increase. We do not know when the list is final. If you don't have MMH, the patient NHIs will be emailed to you. 

Frequently Asked Questions

FAQs for practices, created 20 January, updated 9 February

MMH WS Practice MMH FAQs updated 9 Feb 2026 (check downloads if it doesn't appear in the browser)

These will be periodically updated. Please let us know if you have any questions for us to add. 

Resources to support patients and their wellbeing

Contacting your patients/patients contacting you

If you do wish to proactively contact your patients on the MMH Affected Patient List provided to your practice, we have some suggested wording for this purpose below. This wording is intended as starting point only to reduce the burden on practices by providing plain-language wording that can be adapted locally while remaining aligned with current national knowledge.

Suggested wording - initial communication to patients on MMH Affected Patient List

You can now also share the 0800 number, 0800 747 778.

Patients who are upset about being on MMH and didn't realise may contact you. Here is a proposed script 
Wellbeing support, Access & Choice or BIS

Please use your Access & Choice team, who have been prepped on the situation. If you do not have Access & Choice, please refer patients to our Brief Intervention Service. Clearly mark the information as related to the MMH security breach so that these patients are prioritised. 

 

Reimbursement for practices

Updated 16 Jan

New Low Volume Programme to claim for MMH calls and GP/NP consults:

Details are here  https://wellsouth.nz/provider-access/clinical-resources/funded-programmes/funded-programmes-summary#ManageMyHealth


Updated 9 Jan
HNZ Support

Health New Zealand would like to support practices and patients impacted by the Manage My Health cyber breach by allowing for funded consultations with patients where appropriate.

Services
Funding is available to support services in primary care to support patients who:
1. request clarification of clinical records that have been accessed as part of the breach. This will primarily be related to Te Whatu Ora | Health NZ documents such as discharge letters and clinic records, but may also include specialist referrals
2. require proactive GP led notification because of identified vulnerabilities

More information here MMH Cyber Breach funding for primary care services


Update from HNZ, 12 Jan

Where primary care services are noting increased demand (eg Access and Choice)  as a result of the breach, providers are asked to notify the response/recovery team (practicesupport@managemyhealth.co.nz). Practices needing to allocate additional admin resource to the response are asked to record details, while discussions take place with MMH. 

Communications resources

Patient-facing webpage: https://wellsouth.nz/your-health/mmh-cyber-breach-help You are welcome to link to this page, or use information from it for your own comms. 

Facebook tiles re wellbeing support

Facebook Tile Wellbeing MMH for practices With A&C

Facebook Tile Wellbeing MMH for practices Without A&C

Instructions for patients wanting to close their account: MMH Account Deletion instructions

You are welcome to share any of our posts that may be relevant to your community.

 

MMH comms to patients/0800

The 0800 number

The 0800 is 0800 747 778 and is available to anyone to use. 

MH Impacted Account Email Template 08012026

Legal advice

Legal advice for practices affected by the Manage My Health data breach (MMH Breach)

LEGAL ADVICE practices contacting patients MMH Breach

Updated 12 Jan, Office of Privacy Commission statement

Office of the Privacy Commissioner | Updated statement on Manage My Health cyber incident