The Ministry of Health has been working closely with Tū Ora Compass Health Primary Health Organisation (PHO) following confirmation of illegal cyber access to its computer system.
Tū Ora notified the Ministry as soon as it became aware of unauthorised access in early August. Further investigation confirmed earlier illegal unauthorised access dating back to 2016.
Tū Ora advises this means data may have been accessed for up to an estimated 1 million people and could include data going back to 2002.
The unauthorised access has now been identified as affecting five lower North Island based PHOs that have a relationship with Tū Ora. The illegal access is a crime and has been referred by Tū Ora to the Police.
The Ministry of Health agrees with Tū Ora that publicising these incidents of unauthorised access is the right thing to do.
“Before making details of the cyber intrusion public, we wanted to ensure the Tū Ora Compass information systems were secure and that there were appropriate supports in place for people who may be concerned at potential disclosure. We also needed to ensure publicity wouldn’t increase the risk of further online harm,” says Dr Ashley Bloomfield, Director-General of Health.
Tū Ora Compass has now strengthened its security following the incident. Dr Bloomfield says anyone concerned about the incidents can contact the Ministry of Health’s call centre on
