Skip to main content

What information, if any, was provided to him at the time he was informed of the Canopy Health cyber security incident, if he was informed, about the nature of the unauthorised access, the types of patient information potentially accessed or copied, including health and financial data, and the number of patients whose information may have been affected? and 1 other question

Answered 1873, 1876 (2026)
Questions published
Reply lodged
Bookmark

Asked by

Ayesha Verrall

List MP · Labour Party

Questions

  • 1873

    What information, if any, was provided to him at the time he was informed of the Canopy Health cyber security incident, if he was informed, about the nature of the unauthorised access, the types of patient information potentially accessed or copied, including health and financial data, and the number of patients whose information may have been affected?

  • 1876

    When was the Minister first informed, if at all, that Canopy Health had experienced a cyber security incident involving unauthorised access to patient data in July 2025?

Answered by

Hon Simeon Brown

Member for Pakuranga · National Party · Minister of Health

Answer

I was informed of the incident by the Chief Executive of Canopy Health on 28 July 2025. A subsequent briefing was provided by Health New Zealand which advised that Canopy Health had stated the incident was contained, and that the Office of the Privacy Commissioner, Police, and the National Cyber Security Centre had been notified. I was also advised that Canopy Health had taken precautionary steps, including changing and updating user passwords.