Skip to main content

What explanation, if any, was provided to him by Canopy Health or Te Whatu Ora for why some patients were not notified of the July 2025 cyber security incident until December 2025 or January 2026?

Answered Question 1867 (2026)
Question published
Reply lodged

Asked by

Ayesha Verrall

List MP · Labour Party

Question

  • What explanation, if any, was provided to him by Canopy Health or Te Whatu Ora for why some patients were not notified of the July 2025 cyber security incident until December 2025 or January 2026?

Answered by

Hon Simeon Brown

Member for Pakuranga · National Party · Minister of Health

Answer

I am advised that planning for privacy notifications was undertaken by Canopy Health in consultation with the Office of the Privacy Commissioner.