Full scope of Manage My Health breach revealed in court documents
Wednesday, 7 January 2026
Court documents have revealed the scope of the Manage My Health security breach as the hackers at the centre of it scrub mention of the attack from social media.
The privately run online portal, used largely for GPs and patients to communicate, was hacked on December 30 with about 126,000 patients – or 7% of 1.8 million users – previously said to have been compromised. Court documents put the number of affected patients at 127,000.
The hacker claimed a US$60,000 ($104,000) ransom and, in proof of the hack, released about 200 files on the dark web. A court injunction prevents anyone accessing, retaining or using the hacked data. About 430,000 documents were stolen, court documents show.
Read More:
Private health records surface on dark web after Manage My Health hack
48 hours to pay: Manage My Health quiet as deadline brought forward
They included clinical discharge summaries, referrals and other files. There was also personal health information and historic clinical referrals from 2017 to 2019, according to the court documents.
In evidence to the court to get an injunction, Manage My Health said it included “highly sensitive and confidential descriptions of patients’ ailments, injuries, health conditions, investigations, procedures, and diagnoses” as well as patient details, dates of birth, addresses and contact details.
Further, there were patient medical histories, diagnoses, medical histories, medications and health care plans.
Manage My Health got the injunction against un-named defendants and did not know who the hackers were. They were likely overseas, court documents said.
“Accordingly the applicant says it is not practical nor possible to name any respondent to this proceeding.
“As in previous similar cases, Manage My Health seeks a general injunction against anyone who has or who might obtain the stolen data.”
The hacker had set a Tuesday morning deadline for payment but, when that deadline passed, confirmed it was moved back to Friday at 5am.
Meanwhile, the hacker had been posting about the hack and intentions on an encrypted social media page. But, sometime on Tuesday night or Wednesday morning, all references to Manage My Health were removed.
The hacker, who in the past has responded to requests for comment, did not respond when asked why on Wednesday. Manage My Health has also been approached for comment.