Skip to main content

Did Te Whatu Ora or the Ministry of Health undertake any assessment, if at all, of the risks to patients whose data may have been compromised in the Canopy Health cyber security incident, including risks of identity theft, financial harm, or misuse of sensitive health information; if so, on what date and what were the findings?

Answered Question 1868 (2026)
Question published
Reply lodged
Bookmark

Asked by

Ayesha Verrall

List MP · Labour Party

Question

  • Did Te Whatu Ora or the Ministry of Health undertake any assessment, if at all, of the risks to patients whose data may have been compromised in the Canopy Health cyber security incident, including risks of identity theft, financial harm, or misuse of sensitive health information; if so, on what date and what were the findings?

Answered by

Hon Simeon Brown

Member for Pakuranga · National Party · Minister of Health

Answer

I am advised that Canopy Health undertook a forensic analysis which found no evidence that data was taken. Canopy Health advised Health New Zealand that it chose to notify affected parties as a precautionary measure.