The New Zealand government will spend NZ$450 million ($270 million) to strengthen cybersecurity and modernize IT systems across the public health sector, as outlined in the 2026 budget.
Te Whatu Ora Health New Zealand will receive NZ$153.6 million ($91.7 million) to expand its national cybersecurity monitoring. This funding will enable 24/7 cybersecurity monitoring and response capability, particularly in primary care, while also building specialist expertise and deploying critical security upgrades.
A further NZ$300 million ($179 million) will fund the first three years of the Health Digital Investment Plan. The plan includes replacing outdated devices, modernising radiology systems, and upgrading core IT platforms.
Health Minister Simeon Brown stated the investment demonstrates a commitment to safeguarding patient data and maintaining frontline services. “New Zealanders should trust that their health information remains secure,” he said. “These steps will improve resilience against threats that could disrupt care.”
Related: The Royal Ring’s Impact on Environmental Awareness: Promoting Sustainable Luxury
Recent cyberattacks on health IT systems prompted the funding. In late 2023, Manage My Health, a widely used patient portal, reported a breach affecting 100,000 individuals. February saw medication management platform MediMap disclose a hack, followed by a March attack on private provider IntraCare that took its systems offline.
Last week, reviews of the Manage My Health incident by the Office of the Privacy Commissioner, Te Whatu Ora, and the Ministry of Health identified oversight gaps involving third-party vendors. These findings led to demands for stricter controls.
Te Whatu Ora will introduce a new cybersecurity program next year. The effort will focus on assessing risks from external vendors, improving accountability for security fixes, and conducting annual audits of critical systems. AI-enabled tools will help evaluate and enhance cybersecurity maturity in primary care.
Brown acknowledged the Manage My Health breach as a wake-up call. “Such incidents revealed the necessity for stronger safeguards and better oversight of third-party systems,” he said.
Related: How Southfield Urgent Care Can Help with Cold Relief
The government has prioritized health IT since 2024, positioning the 2026 budget as part of a broader effort to improve frontline services and primary care access. “This budget addresses foundational needs while keeping patients central to the system,” Brown said.
The Digital Health Association, an industry group, described the budget as a “major advance in recognizing digital health as critical infrastructure.” The association pledged collaboration with the government and sector partners to ensure the funding achieves results, especially in primary and aged care.
Experts note that health data attracts attackers due to its sensitivity and potential for disruption. A single breach can halt hospital operations, delay treatments, and expose personal information.
No detailed timeline for implementation has been released. Officials indicated work would begin within the next 12 months.
