New Zealand Health Sector Boosts Cybersecurity Amid Recent IT Outages
Severity: Medium (Score: 51.9)
Sources: Rnz.Co.Nz
Published: · Updated:
Keywords: health, budget, spend, delivers, hospital, upgrades, beds
Severity indicators: hospital
Summary
New Zealand's 2026 health budget allocates $153.6 million over four years to enhance cybersecurity for Health NZ (HNZ) following multiple IT outages and hacks, including the Manage My Health portal. The total health budget increased from $31 billion in 2025 to $34.2 billion in 2026, reflecting a 10% rise. The funding aims to improve IT safety systems and expand national cybersecurity monitoring. Health Minister Simeon Brown emphasized the need for stronger safeguards after a critical review from the Privacy Commissioner highlighted failures in patient data security. HNZ plans to introduce annual audits for critical systems and manage risks from third-party vendors. The budget also includes $930 million for new clinical equipment and technology upgrades across hospitals. Key Points: • New Zealand's health budget for 2026 includes $153.6 million for cybersecurity improvements. • Recent IT outages and hacks have prompted a critical review of Health NZ's data security practices. • Health NZ will implement annual audits and risk management programs for third-party systems.
Detailed Analysis
**Impact** Multiple IT outages and health portal hacks, including the notable compromise of Manage My Health, affected healthcare services in Auckland and Northland over the past year. Patient data security was compromised, prompting a Privacy Commissioner review critical of Health NZ’s data protection measures. The health sector nationwide is impacted, with potential exposure of sensitive patient information and disruption to healthcare delivery systems. The budget allocates $153.6 million over four years to enhance cybersecurity monitoring and IT system upgrades across the national health system. **Technical Details** The articles do not provide specific information on attack vectors, TTPs, malware, exploited CVEs, or infrastructure used in the incidents. Details on indicators of compromise (IOCs) or kill chain stages are not disclosed. The breaches involved third-party systems, with Health NZ planning to introduce annual audits and risk management programs targeting these vendors. **Recommended Response** Prioritize the implementation of enhanced cybersecurity monitoring and IT safety upgrades as funded in the new budget. Conduct annual security audits of critical systems, especially those managed by third-party vendors, to identify and mitigate risks. Deploy continuous monitoring for unauthorized access and data exfiltration attempts on health portals. In the absence of detailed technical indicators, focus on strengthening vendor oversight and enforcing tighter security controls on third-party integrations.
Source articles (2)
- Budget 2026: Health spend delivers for hospital upgrades, more beds and new IT system — Rnz.Co.Nz · 2026-05-28
This year's health budget delivers funding for hospital upgrades, more beds and a new IT system to boost cyber security. The total health spend for 2025 totalled $31 billion. This year, it's $34.2b -… - Budget 2026: Health spend delivers for hospital upgrades, more beds and new IT system — Rnz.Co.Nz · 2026-05-28
This year's health budget delivers funding for hospital upgrades, more beds and a new IT system to boost cyber security. The total health spend for 2025 totalled $31 billion. This year, it's $34.2b -…
Timeline
- 2026-05-28 — Budget 2026 announced: New Zealand's health budget increased to $34.2 billion, with significant funding for cybersecurity improvements.
- 2026-05-28 — Privacy Commissioner review released: A review criticized Health NZ for failing to secure patient data, highlighting recent IT outages and hacks.
- Recent — Multiple IT outages reported: Health NZ experienced several IT outages and hacks, raising concerns over patient data security.
Related entities
- Data Breach (Attack Type)
- Manage My Health (Company)