4 March 2026 – 1.30pm
MediMap Cyber Security Incident – Update
Since our last update, we have completed our review of the information provided by MediMap and have now identified the specific Oceania residents whose personal information was affected by the cyber security incident involving MediMap’s platform.
Affected residents are being contacted individually with a formal privacy notification. If you do not receive a personalised privacy notification, it means that, based on the information currently available from MediMap, your personal information was not affected.
Our manual medication processes remain in place. A digital medication management system will not be restored until we are satisfied it is safe to do so and the information in the system has been verified as accurate.
Answers to frequently asked questions are below. If you have any questions not covered here, please call 0800 333 002 or email [email protected].
Your questions answered
What happened?
On 23 February 2026, Oceania Healthcare was informed by MediMap, our medication management software provider, that an unauthorised third party had gained access to its platform. MediMap subsequently confirmed that personal information relating to some Oceania residents had been accessed and modified, and that some of that information may have been copied.
What information was involved?
MediMap has confirmed that the information affected does not include medication charts, medication administration records, financial information, or contact details such as phone numbers, email addresses, or home addresses.
MediMap has advised that the types of information that may have been affected include:
• Name, date of birth, gender, and ethnicity
• NHI (National Health Index) number
• Allergy and intolerance information
• Care centre location
• Assigned prescriber, pharmacy, and case manager details
What has Oceania done in response to this incident?
We have taken the following steps:
• Notified the Office of the Privacy Commissioner
• Engaged independent cyber security advisers to conduct our own assessment
• Implemented established manual medication processes with additional clinical safeguards
• Contacted affected residents individually with formal privacy notifications
• Continued to work closely with MediMap and Health New Zealand
• Published regular updates to keep residents, families, and staff informed
How do I know if I am affected?
Affected residents are being contacted individually by Oceania with a formal privacy notification letter. If you have not received a personalised letter, it means that, based on the information currently available from MediMap, your personal information was not affected by this incident.
Is my medication safe?
Yes. Since MediMap’s system went offline, our teams have been operating under established manual medication processes specifically designed for situations like this. Our pharmacy partner holds secure backup copies of all prescriptions, and our clinical teams hold independent records of all residents’ allergies. We have also put additional measures in place, including direct clinical support from our Support Office team, increased registered nurse oversight, and daily clinical safety reviews across all sites.
What is the risk to me?
The information involved does not include financial details, passwords, or identity documents. However, personal information such as names, dates of birth, and NHI numbers could potentially be used by someone attempting to impersonate you or obtain further information. The overall risk of this occurring is considered low, but we encourage you to take sensible precautions.
What should I do to protect myself?
As a precaution, we encourage you to:
• Be alert to any unusual or unexpected contact from people you do not recognise, particularly anyone asking for personal details.
• Do not share passwords or financial information with anyone who contacts you unexpectedly.
• Let a family member or our staff know if anything seems out of the ordinary.
You may also wish to visit the New Zealand Government’s Own Your Online resource – ownyouronline.govt.nz – for general guidance on staying safe online. Further information about privacy breaches and your rights is available at privacy.org.nz.
What about NHI numbers?
NHI numbers are used within the New Zealand health system for identification purposes. They cannot be used to access financial accounts or make transactions. While an NHI number on its own poses limited risk, we have included it in our notification to be transparent about all the information that may have been affected.
What about allergy and intolerance information?
Allergy and intolerance information recorded on MediMap’s platform may have been affected. However, our clinical teams hold independent records of all residents’ allergies, and these records have not been affected. Medication continues to be administered safely using our established manual processes.
Has the information appeared anywhere publicly?
At the time of this update, we are not aware of any evidence that the affected information has been published or misused. We continue to monitor the situation.
When will MediMap’s system be restored?
We have engaged independent cyber security advisers to conduct our own assessment before any decision is made to reconnect to MediMap’s platform. The system will not be restored until we are satisfied it is safe to do so and the information in the system has been verified as accurate.
Will Oceania continue to use MediMap?
Our priority is the safety and privacy of our residents. We will not restore any digital medication management system until we are fully satisfied it is safe to do so and the information it contains has been verified as accurate. We are conducting our own independent assessment to inform that decision. We will not be making any decisions about our long-term medication management platform until this process is complete.
Who can I contact if I have questions?
Please call the Oceania team on 0800 333 002 or email [email protected]. You can also speak with your care team or General Manager at your Care Centre.
If you are not satisfied with how this matter has been handled, you have the right to make a complaint to the Office of the Privacy Commissioner. You can find more information at privacy.org.nz or call 0800 803 909.
27 February 2026 – 12.45pm
MediMap Cyber Security Incident – Update
MediMap has now advised that information relating to some Oceania residents has been affected by the cyber security incident involving its platform. We are working with MediMap to confirm the specific residents affected and the exact information involved. MediMap has also advised there remains no evidence that medication charts or medication administration records were accessed or altered. Residents and families have been advised of this development.
Since MediMap’s system went offline, our teams have been operating under established manual medication processes designed for situations like this. Resident care is supported by multiple independent safeguards, including secure pharmacy backup copies of all prescriptions and independent clinical records of all residents’ allergies. We have also implemented additional measures during this period, including direct clinical support from our Support Office team, increased registered nurse oversight, and daily safety reviews across all sites. All residents continue to receive their prescribed medications safely.
We have engaged independent cyber security advisers to conduct our own assessment before any decision is made to reconnect to MediMap’s platform. The system will not be restored until we are satisfied it is safe to do so and are assured the information in the system is accurate.
We have notified the Office of the Privacy Commissioner and continue to work closely with MediMap and Health New Zealand. Further information about privacy breaches and your rights is available at privacy.org.nz.
As a precaution, we encourage residents and families to be alert to any unusual or unexpected contact requesting personal details.
If you would like to speak with an Oceania team member, please call 0800 333 002 or email [email protected]
26 February 2026 – 5.00pm
MediMap Cyber Security Incident – Update
We are continuing to wait for confirmation from MediMap as to whether Oceania care centres or residents’ data has been directly affected by the cyber security incident involving its platform. This confirmation was expected today from MediMap but has not yet been received.
We will provide a further update as soon as confirmation is received.
If you would like to speak with an Oceania team member, please call 0800 333 002 (available 8am–8pm) or email [email protected]
25 February 2026 – 6.00pm
MediMap Cyber Security Incident – Update
We are continuing to await site-level confirmation from MediMap as to whether Oceania care centres or residents’ data has been directly affected by the cyber security incident involving its platform. This confirmation was expected today from MediMap but has not yet been received.
We will provide a further update as soon as confirmation is received.
If you would like to speak with an Oceania team member, please call 0800 333 002 (available 8am–8pm) or email [email protected]
25 February 2026 – 10.30am
MediMap Cyber Security Incident – Update
Early this morning, we received additional information from MediMap, the provider of our medication management system.
MediMap has confirmed that the system disruption was caused by unauthorised access by a third party, and that some resident demographic information across its platform – including names, dates of birth, prescriber details and location of care – was affected.
MediMap is working with external cyber security specialists, Health New Zealand and relevant authorities to investigate and safely restore the system.
We are yet to receive confirmation from MediMap as to whether any of our care centres or residents’ data has been directly affected.
We have been advised that any site-level and resident-level confirmation of affected records will be provided today. We will contact any affected individuals directly as soon as details are confirmed by MediMap.
MediMap has advised there is currently no evidence that medication charts or medication administration records have been altered.
Our established manual medication processes remain firmly in place, and our residents continue to receive their prescribed medications safely.
The care and privacy of our residents remains our highest priority. We will continue to provide updates as more information becomes available.
If you would like to speak with an Oceania team member, please call 0800 333 002 or email [email protected]
24 February 2026
MediMap System Disruption
We are aware of a technical issue affecting our medication administration system, provided by MediMap.
MediMap has taken its IT system offline while it investigates an incident and the system remains unavailable.
We have reverted to our established manual back‑up processes, which are safe and familiar to our staff. This was our standard way of working prior to digitisation.
Most importantly, all residents are continuing to receive their prescribed medications when they are due.
MediMap is investigating the cause of the issue and any potential impacts to our system, and they are keeping us informed as their investigation progresses.
The care and privacy of our residents remains our highest priority. We understand this situation is concerning and will continue to provide updates as new information becomes available.
MediMap have provided an update on their website System Status – MediMap
If you would like to speak with an Oceania team member, please call 0800 333 002 or email [email protected]
20 June 2024
Power outage at Bream Bay Village
There is currently a power outage at our Bream Bay Village. The appropriate companies have been contacted and activity is underway to get this restored. Our residents are safe and cared for by our teams during this time. If you have any questions, please call our Oceania support centre on 0800 333 688 between the hours of 8:30am and 5pm
25 August 2023
Covid Regulation Update
- The government has announced the compulsory mask wearing at our Care Centres, mandatory 7-day isolation requirements for COVID, ceased at midnight on Monday 14th August 2023.
- This is very positive news for our residents and their family and friends, along with our team members.
What this means – Daily
- Visitors and team members at our Care Centres are no longer required to wear a mask.
- Masks will continue to be available for those who wish to wear them.
What this means – If a resident tests positive for COVID
- Our current Infection Protection Control (IPC) Outbreak Plan will be implemented, with team members wearing appropriate PPE for residents in isolation.
- It is recommended that residents isolate for 5 days and take extra IPC precautions whilst they remain symptomatic after this period.
- A COVID outbreak is declared an outbreak from the first positive resident.
- When a COVID outbreak is identified, all team members and visitors need to wear N95 masks at the Care Centre, until all residents test negative and are asymptomatic.
What this means – if a team member tests positive for COVID
- If they test positive and are asymptomatic, the team member will be able to continue working and need wear a N95 mask until they test negative.
- If they test positive and are symptomatic, as with any other situation where someone is feeling unwell, we ask that they stay home until their symptoms have cleared.
9:45am 24 February 2023
Cyclone Gabrielle Hawke’s Bay Update
We are pleased to announce that all our Hawkes Bay Retirement Villages and Care Centres have mains power back on.
We would like to extend our sincere thank you to our residents, their families and friends, our teams, and all the community services including Civil Defence, Te Whatu Ora, the Government Emergency Team and The Regional Council – for your tremendous support during this very challenging time.
8:50am 16 February 2023
Cyclone Gabrielle Hawke’s Bay Update
Gracelands power is now back on.
4pm 15 February 2023
Cyclone Gabrielle Hawke’s Bay Update
Duart Care Centre’s power is now back on.
11:50am 15 February 2023
Cyclone Gabrielle Hawke’s Bay Update
We now have a generator onsite at our Gracelands Care Centre.
11:10am 15 February 2023
Cyclone Gabrielle Hawke’s Bay Update
Eversley Care Centre’s power is now back on.
11am 15 February 2023
Cyclone Gabrielle Hawke’s Bay Update
All our residents are safe and well cared for and we are working closely with Te Whatu Ora to ensure that all of our Hawke’s Bay Villages and Care Centres have all of the provisions they require.
All Atawhai residents have been safely re-accommodated by Civil Defence back to Atawhai Village and Care Centre and there is a generator on-site at Atawhai.
The power remains on at our Woburn Care Centre.
Gracelands, Duart and Eversley have no power and we are working closely with Civil Defence to source generators for these sites.
The main telephone line for all our Hawke’s Bay Villages and Care Centres remain diverted to our Call Centre, 0800 333 688 due to continued communication challenges.
We appreciate that this is a concerning time for residents and families and will keep you updated with more information when it comes to hand.
3pm 14 February 2023
Cyclone Gabrielle Hawke’s Bay Update
Please be assured that all our residents are safe and being cared for by our teams during this National Emergency.
We are experiencing power outages at all our Hawke’s Bay sites and all main telephone lines at all Hawke’s Bay locations are being diverted to our Call Centre, 0800 333 688.
Under instruction from Civil Defence NZ, our Atawhai Retirement Village and Care Centre residents have been evacuated to either Tamatea Intermediate School, 15 Freyberg Avenue or Equippers Church, Corner of York Avenue and Lancaster Streets. They continue to be supported by our care teams who are with them.
We understand your concern during this significant weather event, and we appreciate your support as we take the necessary measure to keep all our residents and our teams safe.
We will keep you updated as more information comes to hand.
31 January 2023
Auckland weather event
Oceania teams in Auckland are supporting residents affected by Friday’s weather event. A weather warning has now been issued for the wider North Island and we’re watching the situation closely. If you have any questions about our villages or care centres, please call our Oceania support centre on 0800 333 688 between the hours of 9am and 8pm.
June 2022
Please see below how we are protecting our residents health and wellbeing in line with Ministry of Health guidance.
Care Centres
Visiting offsite:
Residents are welcome to leave the care centre to go out with family and friends. Residents are encouraged to wear masks and use hand sanitiser when outside the care centre.
Van outings:
Regular van outings have resumed and Covid-19 precautions will be taken if and when applicable.
Organised events:
Residents, friends and families can attend organised events. “Organised events” are special functions (such as a Christmas party) that are planned outside of the normal daily activities. Limiting of numbers is at the discretion of the facility manager.
Visitors:
Visitors must follow the approach set out by the Care Centre, which may include using a visitor booking system, completing a declaration, RAT testing and mask wearing.
Retirement Villages
Wearing masks will protect everyone:
We ask that you wear your mask when you are outside your apartment or villa – including when you are in any of the communal areas.
Organised events:
Events can be held in the community centre in line with Government guidelines for indoor gatherings. We encourage the wearing of a mask if not eating and drinking.
Visitors:
Visitors are welcome, including children and pets, but we ask that they wear a mask if possible.
For any questions, please contact the Care Centre Manager or Village Manager.
You can find more information on COVID-19 and current government recommendations on the Ministry of Health’s website.