Privacy Commissioner Michael Webster.
Photo: VNP / Phil Smith
The Privacy Commissioner of New Zealand, Michael Webster, has initiated an inquiry into the recent cybersecurity breach affecting Manage My Health, a platform widely used for managing personal health information.
This breach appears to have compromised sensitive data from approximately 120,000 users, raising significant concerns regarding data privacy and security protocols within the organization. Given the severity and scale of the incident, Webster emphasized the necessity for a comprehensive privacy investigation.
As part of this inquiry, investigators will assess whether Manage My Health implemented adequate security measures to protect user data. If deficiencies are found, the inquiry aims to identify the reasons behind these lapses. In particular, the investigation will examine how attackers gained access to the system, which may involve techniques outlined in the MITRE ATT&CK framework.
The potential tactics that could have been employed in this attack include initial access methods such as phishing or exploiting known vulnerabilities in software. Following access, techniques related to persistence and privilege escalation may have been utilized, allowing attackers to maintain access and elevate their permissions within the system.
The inquiry also seeks to outline preventive measures to avert similar incidents in the future. Establishing robust safeguards and protocols is essential to bolster user confidence and protect sensitive personal information effectively.
Following confirmation of the breach in late December, the urgency to address systemic vulnerabilities has only escalated. This situation serves as a clarion call for businesses to re-evaluate their cybersecurity frameworks and readiness against similar attacks.
Further updates will follow as the situation evolves…
To stay informed about developments in cybersecurity, consider subscribing to Ngā Pitopito Kōrero, a daily newsletter crafted for business owners, providing curated insights directly to your inbox every weekday.
