A cyberattack on New Zealand medication management platform MediMap has disrupted healthcare services across the country’s aged care sector, forcing many facilities to return to paper-based medication records while specialists investigate the breach. The incident has raised fresh concerns about the resilience of digital healthcare systems after unauthorised changes were detected in patient information, including cases where living residents were mistakenly recorded as deceased.
MediMap, a widely used electronic medication management platform in aged residential care, disability services and hospices, took its system offline after identifying unauthorised access on Sunday. The company is now working with cybersecurity experts and health authorities to verify data integrity before restoring services.
The disruption comes only months after another major healthcare-related cyber incident in New Zealand, adding to growing debate over cybersecurity protections for critical health infrastructure.
MediMap Takes Platform Offline Following Cyberattack
MediMap supports electronic prescribing, medication charts and administration records for healthcare providers across New Zealand. Industry estimates indicate that around 60% of aged care facilities use the platform as part of their daily medication management.
After detecting unauthorised access, the company placed the system into maintenance mode to prevent further issues. According to MediMap, information potentially affected includes patient names, dates of birth, prescriber details, care locations and resident status.
One of the most concerning findings was that some resident status records had been altered, resulting in a number of living patients being incorrectly marked as deceased. Authorities have not reported any confirmed patient harm, but the incident has significantly affected daily operations.
MediMap said it is working with the New Zealand Ministry of Health and cybersecurity specialists to investigate the breach and verify all patient records before bringing the system back online.
Aged Care Facilities Switch to Manual Medication Records
With electronic medication charts temporarily unavailable, healthcare providers have reverted to manual documentation. Nurses are relying on printed pharmacy records, handwritten medication charts and additional verification procedures to ensure prescriptions are administered safely.
These temporary processes require more time during medication rounds and often involve a second nurse checking controlled medicines before they are given. Many facilities have adjusted staffing levels where possible to maintain patient safety while digital systems remain unavailable.
Although manual procedures are well established as contingency plans, they increase administrative workload and leave less room for the automated safety checks normally provided by electronic medication systems.
The outage has highlighted how dependent modern healthcare has become on digital platforms that support routine clinical work every day.
Cybersecurity Concerns Grow Across New Zealand’s Health Sector
The MediMap incident follows another significant healthcare-related cyberattack that affected a private patient portal and reportedly exposed more than 100GB of sensitive information. Together, the two incidents have increased pressure on healthcare organisations and government agencies to strengthen cybersecurity protections.
Prime Minister Christopher Luxon described the latest attack as concerning because it directly affects services supporting older New Zealanders. Associate Health Minister David Seymour also said the incident reinforces the importance of improving the country’s cybersecurity resilience.
Healthcare systems are increasingly viewed worldwide as critical infrastructure because they combine highly sensitive personal information with services that cannot tolerate prolonged disruption.
Cybersecurity specialists have repeatedly warned that hospitals, aged care providers and health technology companies remain attractive targets because service interruptions can quickly create operational pressure.
What Happens Before MediMap Returns Online?
MediMap has confirmed that the platform will stay offline until investigators complete extensive validation of its data.
The restoration process includes:
• Verifying resident status records
• Reviewing prescription information
• Auditing medication histories
• Confirming that unauthorised access has been fully removed
The company said patient safety remains its highest priority and that healthcare providers should continue using established manual procedures until the platform can safely return to service.
Why the Breach Matters Beyond One Company
Although MediMap is a privately operated platform, the effects of the outage extend well beyond a single technology provider. Healthcare organisations increasingly depend on digital systems for prescribing, medication administration and patient records, meaning any prolonged disruption can have nationwide consequences.
Major cyber incidents also bring significant financial costs, including forensic investigations, legal obligations, regulatory reviews and future cybersecurity upgrades. For technology companies serving healthcare providers, maintaining trust becomes just as important as restoring technical systems.
The latest incident is also likely to influence future discussions around cybersecurity standards and compliance requirements for digital health providers operating in New Zealand.
Healthcare organisations worldwide are investing more heavily in cyber resilience as attacks become more frequent. Those efforts include stronger system monitoring, faster incident response and improved recovery planning designed to keep essential services running during security events.
For additional coverage of cybersecurity threats affecting essential services, see our report on technology infrastructure challenges and digital resilience.
As forensic investigations continue, aged care providers remain focused on one priority: ensuring patients receive their medications safely while digital systems are carefully checked and restored. The MediMap incident serves as another reminder that protecting healthcare technology is now closely linked to protecting patient care itself.
Make Swikblog your go-to source on Google for reliable updates, smart insights, and daily trends.
