Waikato DHB ransomware attack exposed patient records and crippled New Zealand hospital services

Surveillance & Privacy4/5 wildness

Waikato DHB ransomware attack exposed patient records and crippled New Zealand hospital services

Waikato District Health Board ransomware attack / 2020s

On 19 May 2021, ransomware brought down all Waikato District Health Board IT systems and phone lines, disrupting hospitals across New Zealand. An unidentified group claimed responsibility on 25 May, saying it had obtained patient notes, staff details and financial information, deleted most backups, and set a seven-day ultimatum. Waikato chief executive Kevin Snee and Health Minister Andrew Little said the DHB and government would not pay. On 27 May, officials confirmed that files sent to The New Zealand Herald contained genuine confidential information and referred them to police.\n\nThe outage postponed some surgeries, disrupted diagnostic and radiation services, created treatment backlogs, and forced urgent cancer patients to be transferred to private providers or other district health boards. By 29 June, Radio New Zealand and Stuff reported that documents including medical records, correspondence and financial data had appeared on the dark web. The DHB restored clinical services during June but continued using manual processes. Stuff journalist Dileepa Fonseka reported that a proposed national cybersecurity upgrade negotiated in 2019 was abandoned because the Ministry of Health lacked funding. The Privacy Commissioner warned other DHBs to address vulnerabilities; Waikato was not fined, though it could face liability if patients suffered harm, and Little promised an independent inquiry.