Source: Privacy Commissioner
Privacy Commissioner John Edwards is warning DHBs to address any security failings identified in a Ministry of Health stocktake of health IT systems in 2020. Mr Edwards says his office has been notified of the Waikato DHB ransomware breach and is monitoring the situation closely while providing advisory support. We are aware that some patient, staff, contractor and other personal information has been distributed to news media organisations by unknown individuals. Our expectation is that the DHB would notify and offer support to the individuals identified in that information without delay. We would also expect that the DHB would be actively monitoring for potential host sites on the Dark Web or elsewhere.