Manage My Health Faces Ransom Demands After Massive Cyber Attack

Hacking group Kazu claims responsibility, raising concerns about their global reach and motives

Apr. 11, 2026 at 8:24pm

Got story updates? Submit your updates here. ›

A highly detailed, glowing 3D macro illustration of a futuristic, neon-lit medical data server rack, with pulsing cables and circuits. The server rack is surrounded by a swirling vortex of binary code and digital artifacts, conceptually representing the breach of sensitive healthcare data.A cyber attack on New Zealand's largest patient portal has exposed the vulnerability of sensitive medical data to digital extortion.Dallas Today

Over 120,000 New Zealanders have had their sensitive medical records stolen in a cyber attack on Manage My Health, the country's largest patient portal. The hacking group Kazu is demanding a $60,000 ransom, and their global trail of digital destruction raises serious questions about their motives and methods.

Why it matters

This attack highlights the growing threat of cybercrime targeting critical healthcare infrastructure and sensitive personal data. It also raises ethical dilemmas around whether governments and organizations should negotiate with hackers to protect victims, or take a firm stance against ransom payments.

The details

The Manage My Health breach is the latest in a long line of attacks linked to the hacking group Kazu, who have targeted organizations across the globe, from Nepal to Texas. In July 2025, they allegedly stole 1.4TB of data from the Nepali Ministry of Education, and have since claimed responsibility for breaches of the Nepali police, the Doctor Alliance in Dallas, and numerous other entities in South America, the Middle East, and beyond. Their motives appear to be a mix of financial and political, with a post referencing support for the Venezuelan President Nicolás Maduro.

  • On New Year's Eve, Kazu launched the cyber attack on Manage My Health.
  • On December 30, Kazu released a sample of the stolen data.
  • The initial ransom deadline set by Kazu has passed, with unverified reports of a new deadline of 5 a.m. on Friday.

The players

Kazu

A hacking group with a global trail of digital destruction, targeting organizations ranging from government ministries to healthcare providers with ransomware attacks and data breaches.

Manage My Health

New Zealand's largest patient portal, which has been the victim of a cyber attack by the Kazu hacking group, resulting in the theft of sensitive medical records for over 120,000 patients.

New Zealand Government

Has taken a firm stance against paying ransoms, warning that it incentivizes further criminal activity and may violate international sanctions, with offenders facing up to seven years in prison and hefty fines.

Got photos? Submit your photos here. ›

What’s next

The New Zealand government and Manage My Health are working to prevent the stolen data from being accessed or shared, with a High Court injunction in place. However, the ethical and practical implications of the government's stance against paying ransoms remain a subject of debate.

The takeaway

This cyber attack on Manage My Health highlights the growing threat of cybercrime targeting critical healthcare infrastructure and sensitive personal data. It also raises complex ethical and practical questions about how governments and organizations should respond to such attacks, balancing the need to protect victims with the risk of incentivizing further criminal activity.