A digital medical records company, MediMap, has been taken offline following the modification of patient records, including instances where individuals were incorrectly marked as deceased.
Impact on Healthcare Providers
MediMap is utilized by healthcare providers in aged care, disability services, hospice care, and community health settings to accurately record medication dosages. The platform facilitates coordination between clinics, pharmacies, and patients, and supports e-prescribing alongside maintaining medication histories.
The company notified clinics that the issue began around 1:30 pm on Sunday and initiated a shutdown to investigate. As many as 60 percent of aged care facilities may use the app, forcing them to revert to paper-based processes.
MediMap identified “unauthorised entry” involving names, dates of birth, prescribers, location of care, and resident status. The company is working with the Ministry of Health, specialist cyber experts, the Office of the Privacy Commissioner, and NZ Police.
MediMap director Geoffrey Sayer stated the company’s focus is on helping facilities continue patient care, followed by remediation and restoration. Sayer also apologized for the disruption and concern caused by the situation.
Government Response
Prime Minister Christopher Luxon described the breach as “concerning,” particularly in light of the recent Manage My Health incident, and advocated for stronger cybersecurity laws in New Zealand.
Associate Health Minister David Seymour emphasized the importance of cybersecurity, stating that New Zealand “cannot afford to be the weakest link” and that the government is actively working to improve its cybersecurity posture.
The company is conducting “data integrity checks” and will provide guidance on resolving the issue and the timeframe for restoration.
Frequently Asked Questions
What happened with MediMap?
MediMap was taken offline after some patient records were modified, including instances where users were incorrectly marked as deceased.
What is MediMap used for?
MediMap is used by healthcare providers to accurately record medication doses and coordinate care between clinics, pharmacies, and patients.
What is the government doing about this?
Prime Minister Christopher Luxon and Associate Health Minister David Seymour have both stated the importance of strengthening cybersecurity laws and infrastructure in New Zealand.
As MediMap works to restore its systems, what level of security will be necessary to regain public trust in digital health records?