Privacy Commissioner Michael Webster has confirmed his office is investigating the cyber-attack, which resulted in unauthorised access to highly sensitive health information, including medical documents, discharge summaries, and referral letters belonging to patients across Aotearoa. While investigations are ongoing, the breach has highlighted significant vulnerabilities in digital health systems that store large volumes of personal information. Health information is among the most sensitive personal data, and its exposure can lead to distress, loss of trust, and potential misuse. As the investigation continues, the Privacy Commissioner says accountability, transparency, and strong safeguards will be essential to protecting New Zealanders’ privacy in an increasingly digital health environment. For many patients, the breach is a sobering reminder that while digital systems can improve access and efficiency, privacy and security must remain paramount.