Medication management platform MediMap remains offline across New Zealand after the company discovered some resident records had been “incorrectly modified.”

In a statement on its website, MediMap said its team was “actively engaged in assessing the scope of the data impacted and working to restore data integrity as a priority.”

MediMap director Geoffrey Sayer confirmed that on Sunday, the company identified unauthorised activity within its system that resulted in “some patients’ demographic records being incorrectly modified within the MediMap platform.”

“As soon as we became aware of the issue, we engaged specialist external cyber experts and placed the platform into maintenance mode as a precautionary measure to protect patient safety. Our focus is on helping facilities to provide continuation of care, and then on remediation and safe restoration,” Dr Sayer said.

“Our preliminary investigation indicates that the incident has affected certain demographic information, such as resident name, date of birth, assigned prescriber, location of care and resident status.”

Health NZ acting chief information technology officer, digital services Darren Douglass told Pulse+IT Health NZ was “aware that MediMap, a privately owned medication management platform, is currently experiencing an IT issue.”

Mr Douglass confirmed Health NZ was in contact with MediMap, “to understand the impact and scope of the issue.” 

Health NZ Update

In a later update, Health NZ said it was aware that MediMap had taken its platform offline after identifying unauthorised activity within its system.

“As a private company, MediMap is solely responsible for ensuring the security of its platform and needs to be doing everything it can to manage this incident and minimise any potential impact.

“New Zealanders expect that companies involved in healthcare have secure systems and platforms that safeguard their private information.

“Health NZ is supporting MediMap with its response and has activated our Cyber Incident Management Team to assist. We are also working with other relevant agencies to respond including the National Cyber Security Centre.

“MediMap has advised users of its platform to implement their business continuity plans to ensure patients can continue to receive care without disruption.

“These include some Health New Zealand services, such as transfer of care when residential care patients are discharged, and opioid recovery service.”

“maintenance mode”

MediMap is a digital medication management platform used widely across New Zealand to streamline prescribing, pharmacy dispensing, and medication administration in care environments such as aged residential care, disability services, hospices, and community health.

The platform would remain in maintenance mode (offline) while the investigation continued, with its system status page currently showing “NZ Unavailable” while Australia remained “OK”.

The company advised users to follow their business continuity plan while its electronic medication charts were unavailable.

A separate notice advised users that while the system was unavailable in New Zealand, its MMGO and MediMap Mobile features could be used in airplane mode if they had not been synced since 1:30pm Sunday 22 February 2026.

Dr Sayer said customers had reverted to their standard alternative manual processes to ensure patients continue to receive the required levels of care they should expect.

He confirmed that Health NZ was in contact with MediMap to provide support, while the company had also notified the Office of the Privacy Commissioner and NZ Police.

UPDATE from medimap

In an update posted to the MediMap website on February 25, the company said it was urgently seeking a court injunction to protect any impacted individuals’ information.

The injunction would prohibit anyone from accessing, using, copying, sharing, or publishing any MediMap data that may have been unlawfully obtained, and would seek to limit any further spread of that information online.

“We understand this situation is concerning for residents, patients, their families, and healthcare providers. We sincerely apologise for any distress this may have caused.

“We are working closely with New Zealand Government agencies, including NZ Police, the National Cyber Security Centre (NCSC), and Health New Zealand, as we manage this issue and urgently review any data that may have been unlawfully accessed or shared.

“Our investigation into the alleged unauthorised access and modification of data is ongoing. We are working to identify any personal information that may have been accessed by an unauthorised third party. Once this process is complete and we have verified the facts, we will contact affected customers directly regarding any necessary next steps.

“We want to reiterate that while some resident and patient data may have been accessed, residents and patients will continue to receive the same level of care while the MediMap system remains offline.

“We are continuing to provide updates to our users so they can communicate effectively with residents, patients, and their loved ones. We acknowledge and thank providers and their staff for their professionalism and commitment in ensuring continuity of care during this time. We will continue to keep them informed and work closely with them to provide support.

“Our priority remains working with our customers to restore our platform as quickly and as safely as possible.”

AGED CARE ASSOC COMMENTS

Aged Care Association (ACA) chief executive Tracey Martin told Pulse+IT she was contacted about the outage by affected members on Sunday evening.

She said that since that time, members had been forwarding her the communications issued by MediMap over the preceding 36 hours, “as MediMap has not contacted the Association directly.”

She noted that MediMap is a business system choice made by individual providers to manage resident medication and clinical information, and therefore “there is no obligation on vendors to provide information to the Association and we rely on members to keep us informed where issues arise.”

“My understanding is that MediMap is a commonly used system within aged residential care and usage may be as high as approximately 60 per cent of the sector,” although the ACA does not hold precise data on vendor uptake.

Ms Martin confirmed that MediMap had instructed users to revert to manual, paper-based medication systems while the issue is being resolved.

“While this is more time-consuming for staff, we are being told that it is functioning in practice and providers have activated their standard clinical safety and contingency procedures.”

She said the ACA was not aware of any confirmed cases of patient records being deliberately altered to change prescribed medications.

“We have not received any information indicating that medications have been incorrectly administered as a result of the current system suspension. Members are understandably seeking further clarity from MediMap regarding the nature of the issue, the remediation plan and the timeframe for full restoration of the system with confidence in its accuracy,” Ms Martin said.

“Providers are also managing inquiries from families who are seeking reassurance that their loved ones continue to receive medications as prescribed. At this stage, members are relying on their established clinical governance and medication management processes while the digital system remains offline.”

The ACA would continue to monitor the situation through feedback from members.

This article has been updated.