Confirmation Tū Ora Compass Health’s computer system has been accessed illegally by cyber intruders has prompted Ministry of Health action.  

Tū Ora notified the Ministry of unauthorised access in August and further investigation confirmed earlier illegal access dated back to 2016. The cyber security breach means data relating to approximately one million people could have been accessed, possibly going back to 2002. It is believed to affect five lower North Island based Primary Health Organisations (PHO) that have a relationship with Tū Ora.  

Director-General of Health Dr Ashley Bloomfield confirmed the Ministry of Health is working with other PHOs and DHBs to check the security of their systems and, if necessary, ensure this is strengthened. Additional monitoring and cyber 'stress testing' of DHB and PHO computer security is underway.  

"We have also been working with the Government Communications and Security Bureau's National Cyber Security Centre to investigate this intrusion and check if other PHOs and DHBs might be at risk. This work is ongoing, and we expect to have an initial assessment in the next two weeks,” said Bloomfield.  

The matter has been referred to police.