IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

New Zealand health service hackers send stolen data to press

Local media have confirmed they won’t make the information public and have referred it to the police

The hackers behind the Waikato District Health Board (DHB) attack last week have sent key data from the organisation's systems to media outlets while the organisation continues to try and repair its IT systems.

"We are aware that the media have received what appears to be personal and patient information from Waikato DHB information systems. Media outlets have confirmed they will not make this information public and have referred it to the police," the Waikato DHB said in a statement.

The organisation is working closely with the National Cyber Security Centre, Government Communications Security Bureau, The Privacy Commission and the NZ Police to "respond, remediate and recover from this incident".

Kevin Snee, the Waikato DHB chief executive, added that the situation would not be resolved quickly.

"Our staff are pulling together as a team and working collaboratively with our partners to restore services, but disruptions are to be expected as workarounds are put in place," he said.

Full manual processes have been implemented across the DHB and work continues to determine how best to support the backlog of patients whose care has been deferred. Patients are being asked to bring their appointment letter and any other information from their GP as the DHB still doesn't have access to its clinic booking information.

Related Resource

How to increase cyber resilience within your organisation

Cyber resilience for dummies

Cyber resilience for dummies - How to improve cyber resilience within your organisation - whitepaper from MimecastDownload now

Furthermore, the DHB is working with cancer care providers to ensure patients receive appropriate and uninterrupted treatment, and develop a process for recently referred patients and new referrals. As Australia and New Zealand have a long-standing arrangement to transfer patients for treatment, the DHB disclosed that sending patients to Australia will be a last resort.

"This is a criminal investigation and we have every confidence that it is being dealt with by NZ Police and cyber security experts. Care and safety of patients remains our highest priority, and we must concentrate on health services and supporting our staff to do their job," Snee said.

The cyber attack brought down the Waikato DHB's complete IT network last week which resulted in some appointments being cancelled. Staff were working to restore the infected systems and had the theory that the initial incursion was made via an email attachment.

The DHB confirmed it had received communication from the supposed hackers and was still determining the nature of the attack.

Featured Resources

Accelerating AI modernisation with data infrastructure

Generate business value from your AI initiatives

Free Download

Recommendations for managing AI risks

Integrate your external AI tool findings into your broader security programs

Free Download

Modernise your legacy databases in the cloud

An introduction to cloud databases

Free Download

Powering through to innovation

IT agility drive digital transformation

Free Download

Recommended

Skills shortages expected to hit over 90% of Australian and New Zealand businesses
Careers & training

Skills shortages expected to hit over 90% of Australian and New Zealand businesses

28 Jun 2022
Why India wants to become a chipmaking powerhouse
components

Why India wants to become a chipmaking powerhouse

28 Jun 2022
Samsung fined $14 million over misleading water resistance claims across its Galaxy smartphones
Mobile Phones

Samsung fined $14 million over misleading water resistance claims across its Galaxy smartphones

23 Jun 2022
Toshiba eyes $22bn buyout offer in bid to go private
Business strategy

Toshiba eyes $22bn buyout offer in bid to go private

23 Jun 2022

Most Popular

Actively exploited server backdoor remains undetected in most organisations' networks
cyber attacks

Actively exploited server backdoor remains undetected in most organisations' networks

1 Jul 2022
Macmillan Publishers hit by apparent cyber attack as systems are forced offline
Security

Macmillan Publishers hit by apparent cyber attack as systems are forced offline

30 Jun 2022
Former Uber security chief to face fraud charges over hack coverup
data breaches

Former Uber security chief to face fraud charges over hack coverup

29 Jun 2022