1873 (2026). Hon Dr Ayesha Verrall to the Minister of Health

1873 (2026). Hon Dr Ayesha Verrall to the Minister of Health: What information, if any, was provided to him at the time he was informed of the Canopy Health cyber security incident, if he was informed, about the nature of the unauthorised access, the types of patient information potentially accessed or copied, including health and financial data, and the number of patients whose information may have been affected?

Hon Simeon Brown: I was informed of the incident by the Chief Executive of Canopy Health on 28 July 2025. A subsequent briefing was provided by Health New Zealand which advised that Canopy Health had stated the incident was contained, and that the Office of the Privacy Commissioner, Police, and the National Cyber Security Centre had been notified. I was also advised that Canopy Health had taken precautionary steps, including changing and updating user passwords.