ManageMyHealth listed on kazu ransomware leak site

• Ransomware group: kazu
• Country: New Zealand
• Sector: Healthcare
• Announcement date: December 30, 2025

ManageMyHealth targeted by kazu ransomware group

The New Zealand-based health platform ManageMyHealth has been listed on a leak site by the threat actor group known as kazu. This announcement, made on December 30, 2025, follows an alleged attack that occurred on December 29, 2025. The listing indicates a significant security incident involving the healthcare organization.

Details of the alleged ransomware attack

According to the claims made by the kazu group, the incident involved a significant volume of data. The threat actor states that they have leaked 108 GB of data that allegedly belongs to the ManageMyHealth platform. In conjunction with this data leak, the group has issued a ransom demand of $60,000.

Ransomware attacks often involve a tactic known as double extortion. In these scenarios, threat actors do not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive data. The attackers then threaten to publish this stolen information on public leak sites if the ransom is not paid. This method increases the pressure on the victim, as the threat of a data leak can cause significant reputational and legal damage regardless of whether the systems can be restored from backups.

Data involved in the leak

While the group has claimed a specific volume of data has been compromised, there is no detailed description or screenshot available regarding the content of the allegedly leaked data. The listing names no specific data types.

Potential risks and implications

The implications of such a breach can be severe, particularly within the healthcare sector. Given the sensitive nature of health data, this incident may pose risks of identity theft and fraud for the affected individuals. When personal health information is exposed, it can be utilized in secondary attacks or targeted phishing campaigns, where attackers use specific details to gain the trust of victims.

Furthermore, the alleged leak could damage the organization's reputation and undermine user trust in the platform. For organizations operating in the healthcare sector, maintaining the confidentiality and integrity of patient data is a primary requirement. A breach of this nature often necessitates investigations into the organization's compliance with local data protection regulations.

Defensive measures and organizational impact

The kazu group remains a relatively opaque entity, as information regarding their specific methods and motivations is limited. This lack of clarity makes it difficult for defenders to anticipate their specific tactics, techniques, and procedures.

To mitigate the risks associated with ransomware and data exfiltration, organizations in the healthcare sector typically focus on several defensive pillars. These include implementing robust access controls to ensure only authorized personnel can reach sensitive databases, maintaining offline and immutable backups to recover from encryption, and employing continuous monitoring to detect unauthorized data movement. Additionally, regular security awareness training can help prevent the initial access often gained through phishing. As seen in this incident, the potential for secondary exploitation of stolen data remains a critical concern for any entity handling sensitive personal information.