An investigation into a hack of Wellington-region primary health organisation (PHO) Tū Ora Compass Health in August has revealed it has been attacked by four different malicious actors dating back to 2016.

The finding has led the Ministry of Health to order the other PHOs and the district health boards to check their systems for vulnerabilities, with three DHBs identifying a vulnerability in their websites and subsequently taking them offline.