MMH have confirmed that they will begin notifying affected patients over the next few days and may take up to five days to communicate with all patients. Our understanding is that MMH will reach out to patients via email (the email they registered MMH with) and then direct them to the portal to see which documents have been breached, or, if the patient is unaffected, we understand that the plan is they will see a green tick within the portal to indicate their data has not been breached.

If you are affected by this breach, Management My Health will contact you via email. An 0800 helpline has been established for patients to contact if their data has been breached and need further clarification and/or support from MMH.

Affected patients are welcome to book in for a free 30-minute consultation with our Health Improvement Practitioner who can support you.

Please call us on (03) 455 0006 if you would like to book an appointment.

MMH states the incident is contained and the platform has been independently verified as secure to continue using. On becoming aware of the incident, Aurora has stopped sending consultation notes from our patient management system to MMH while investigations progress.

Manage My Health have stated the platform is safe to use after an incident verification from a cybersecurity expert.
You can continue using MMH for bookings and repeat prescriptions.

This is entirely your decision. MMH have said they will communicate via the app, so if you choose to close your account, it may mean you need to call MMH if you receive an email from them.

How:
Log into the MMH app or website - go to My Account - choose Close Account

• Change your MMH password and avoid re-using it on other sites.

• Enable MFA using an authenticator app. See steps below for how to do this.

• Be alert to scams and phishing: Don’t click unknown links; report suspicious emails, call, or messages.

MFA adds a second code (a code) when you log in, which makes your account much harder to compromise.

1. Open MMH (app or browser) and sign in.

2. Go to Profile/Account - Security (or Two Factor Authentication).

3. Choose an Authenticator app (eg Google Authenticator or Microsoft Authenticator).

4. Scan the QR code or enter the setup key shown on MMH.

5. Enter the 6 digit code from your authenticator app to confirm setup.

6. From now on, you’ll enter your password and a fresh code from the authenticator app each time you log in.

MMH has confirmed support for Google and Microsoft Authenticator apps and encourages enabling 2FA/MFA.

Some patients have noticed that logging in via the MMH app now redirects them to a web browser.

MMH have explained that this redirection is so they can install some updates to allow them to show whether a patient has been breached, directly in the app.