The recent cyber security incident affecting New Zealand's ManageMyHealth platform serves as a critical reminder that healthcare organisations across Australia and New Zealand face increasingly sophisticated cyber threats. With over 126,000 patients potentially affected, this breach highlights the urgent need for healthcare providers to strengthen their security posture.
Rather than focusing on what went wrong, this article examines the key lessons healthcare organisations can learn and provides actionable recommendations to strengthen cyber resilience across the sector.
Healthcare data remains one of the most valuable targets for cybercriminals in the Asia-Pacific region. The National Cyber Security Centre's latest Cyber Threat Report reveals that more than 40% of incidents in 2024/25 had criminal or financial motivations, representing a significant increase from previous years.
What makes healthcare particularly vulnerable? Medical records contain comprehensive personal information including identification documents, addresses, dates of birth, and sensitive health data. This information has substantial value on the dark web and can be exploited for identity theft, financial fraud, insurance fraud, and extortion.
The ManageMyHealth incident demonstrates that attackers are specifically targeting healthcare organisations with relatively modest ransom demands, suggesting they view Australian and New Zealand healthcare providers as viable, accessible targets. This trend is likely to continue and accelerate throughout 2026.
The good news is that many successful attacks exploit basic security gaps that can be addressed through systematic improvements. Healthcare organisations that prioritise fundamental security hygiene significantly reduce their attack surface.
Email remains a primary attack vector for phishing, credential harvesting, and initial access. Implementing robust email authentication protects both your organisation and your patients from sophisticated email-based attacks.
Weak access controls represent one of the most common vulnerabilities exploited in healthcare breaches. Strong authentication and access management are fundamental to protecting patient data.
Attackers actively scan for known vulnerabilities and unpatched systems. A systematic approach to vulnerability management significantly reduces your organisation's exposure to opportunistic attacks.
Beyond prevention, healthcare organisations must be prepared to respond effectively when incidents occur. Operational resilience ensures your organisation can maintain critical services and recover quickly from cyber incidents.
A comprehensive backup strategy is your last line of defence against ransomware and data loss. Recent case studies demonstrate that organisations with robust, tested backups recover significantly faster and avoid paying ransoms.
The speed and effectiveness of your initial response to a cyber incident can dramatically impact the overall damage. A well-rehearsed incident response plan ensures your team can act decisively under pressure.
Effective cyber security requires ongoing commitment from leadership and integration into organisational governance structures. Security is not a one-time project but a continuous process of assessment, improvement, and adaptation.
Board and executive leadership play a crucial role in establishing security culture and ensuring adequate resources are allocated to protect patient data.
Healthcare organisations increasingly rely on third-party vendors for critical services. The NCSC reports that supply chain attacks targeting third-party suppliers are an increasing trend across the sector.
Technical controls alone are insufficient. Healthcare staff at all levels must understand their role in protecting patient data and recognising potential threats.
Improving cyber security can feel overwhelming, particularly for resource-constrained healthcare organisations. The key is to start with high-impact, foundational controls and build systematically from there.
We recommend prioritising improvements in this order:
Healthcare organisations in Australia and New Zealand operate under specific privacy and security obligations that require prompt action when breaches occur.
Both jurisdictions are increasing scrutiny of healthcare data security practices. The recent ManageMyHealth incident resulted in immediate government review and will likely influence future regulatory expectations across the Trans-Tasman region.
The threat landscape facing healthcare organisations will continue to evolve throughout 2026 and beyond. Ransomware groups are becoming more sophisticated, attack methods are diversifying, and the value of healthcare data continues to attract criminal attention.
However, organisations that take a systematic, risk-based approach to cyber security can significantly reduce their exposure. The measures outlined in this article represent proven practices that demonstrably improve security outcomes.
Most importantly, cyber security is not solely a technology challenge. It requires commitment from leadership, engagement from staff across the organisation, and integration into core business processes. Healthcare organisations that treat security as a strategic imperative, rather than a technical burden, are best positioned to protect the patients who trust them with their most sensitive information.
At Insicon Cyber, we are experienced in helping healthcare organisations across Australia and New Zealand strengthen their cyber security posture. Our team understands the unique challenges facing the healthcare sector, from legacy systems to regulatory compliance, and we deliver practical, risk-based solutions that work in real-world healthcare environments.
Don't wait for a breach to take action. Contact Insicon Cyber today to discuss how we can help your organisation build a stronger, more resilient security posture.