Newsletter

“When the Crown Holds Māori Data, It Bleeds: The ManageMyHealth Breach and Simeon Brown’s Patterns of Destruction” - 10 January 2025

Ethier way - Simeon Brown Needs To Be Sacked Or Resign By The End Of The Month

Ivor Jones The Māori Green Ltn

10 Jan 2026 — 17 min read

Kia ora whānau. Ko Ivor Jones tēnei, Te Māori Green Lantern.

The digital vault holding 126,000 New Zealanders’ most intimate health secrets wasn’t cracked by sophisticated hackers wielding zero-day exploits. It was left open by a government that spent years dismantling the very expertise meant to guard it—then expressed shock when thieves walked through as reported by RNZ and confirmed in the government’s official response. This is not a cybersecurity failure. This is a whakapapa of deliberate dismantling, ideological vandalism, and Crown breaches of Te Tiriti that culminated in Māori health data—taonga tuku iho—becoming tradeable commodities on criminal markets.

Health Minister Simeon Brown stands in the wreckage calling it “very serious” and “unacceptable” as he told RNZ, but his hands hold the axe that felled the defenses. This essay traces five hidden connections that expose whose interests this government serves, and whose bodies it sacrifices.

Koha—Support This Mahi

This research drew on 200+ sources verified across government documents, peer-reviewed journals, tribunal findings, and investigative journalism. No synthetic data. No fabricated claims. Real accountability for real harm.

Three pathways exist for those who wish to support this work:
Koha (voluntary contribution): https://app.koha.kiwi/events/the-maori-green-lantern-fighting-misinformation-and-disinformation-ivor-jones
Substack subscription: https://themaorigreenlantern.substack.com/subscribe
Direct bank transfer: HTDM, account 03-1546-0415173-000

Every koha signals that whānau are ready to fund the accountability that Crown and corporate structures will not provide. It signals that rangatiratanga includes the power to fund our own truth tellers.

Kia kaha, whānau. Stay vigilant. Stay connected.

The IT Massacre That Invited the Breach

The Public Service Association’s National Secretary Fleur Fitzsimons asked the question that cuts to the bone: “Where was this vigilance when his administration was reducing the Digital Services team at Health NZ?” as quoted by RNZ and echoed in the Otago Daily Times. Health NZ was forced to cut more than 2,000 roles including the IT experts whose job was safeguarding patient information, as documented by RNZ. This occurred despite the 2021 Waikato DHB ransomware attack that should have served as a “wake-up call,” and an anonymous tip in June 2025 warning that ManageMyHealth had exposed names, emails, and passwords, as reported in the NZ Herald’s security analysis.

Security expert Adam Burns from Blackveil conducted a post-breach analysis and found what he called “baseline controls”—the cyber equivalent of locking your front door—were missing as detailed in the NZ Herald. Email security was set to “p=none” (monitoring only, providing “no active protection”), encryption keys were outdated 1024-bit instead of modern 2048-bit standards, and patient login portals had weaker security than public marketing pages. Burns found this pattern across ManageMyHealth operations in New Zealand, Australia, and India, suggesting “a governance issue rather than a one-off technical mistake.”

Nearly 98% of health IT experts warned that proposed digital services cuts would hurt patients as reported by RNZ, with one West Coast IT worker warning “patients will die” as Health NZ slashed its data and digital services as RNZ documented. Hospitals now face greater risk of cyber attacks due to mass IT staff layoffs according to a Health NZ document as RNZ reported.

The PSA called the breach “a ticking time bomb” that detonated after the government failed to heed lessons while forcing Health NZ to gut its digital defenses as stated in RNZ coverage. Health NZ now hires contractors from Datacom to plug holes left by axed IT staff—privatizing security at crisis rates after pushing out salaried experts who understood system vulnerabilities.

Cui bono? Private contractors profit. Patients bleed.

Hidden Connection #2: Māori Data Unprotected After Māori Health Authority Dismantled

The breach disproportionately hammers Northland, where 45 of the affected GP practices are located as court documents revealed and reported by Newstalk ZB and the NZ Herald. ManageMyHealth itself acknowledged the “disproportionate impact that this incident has had on some Northland communities” as stated in their company update. Northland has a high Māori population already bearing worse health outcomes including disproportionate impacts from conditions like acute rheumatic fever and group A streptococcal pharyngitis as documented in peer-reviewed research.

This is not coincidence. It is the predictable result of systematically dismantling Māori health governance. Te Whatu Ora disestablished its entire Māori health team at the National Public Health Service as reported by Kaitiaki Nursing NZ, with Health NZ confirming cuts at Hauora Māori services and Pacific health as the NZ Herald documented. The government disestablished Te Aka Whai Ora, the Māori Health Authority, as Sir Collin Tukuitonga described when he quit his health roles and analyzed in the NZ Medical Journal.

Simeon Brown has moved to “clarify and streamline” (read: weaken) iwi-Māori Partnership Boards, shifting their focus away from local service design to mere “engagement” and “advice” as detailed in his Cabinet paper and reported by RNZ. The Regulatory Impact Statement admits “only limited consultation has been undertaken and engagement with Māori representatives has been limited to the Hauora Māori Advisory Committee”—a process Māori health providers told a select committee would “further sideline Māori in the health sector” as RNZ reported.

When Māori hold Māori data, the Crown demands gold-standard scrutiny. Māori organisations were dragged through year-long inquiries over Census and vaccination data with full vindication, as Te Pāti Māori co-leader Debbie Ngarewa-Packer documented. When corporates hold it, the Crown looks away—until 400,000 private health files sit on the dark web as she stated.

This is a Te Tiriti breach laid on top of Te Tiriti breaches. The Waitangi Tribunal’s Wai 2575 report found the Crown systematically breached Te Tiriti by failing to design and administer primary health care to actively address Māori health inequities, failing to give effect to tino rangatiratanga in health governance, and failing to collect adequate data on Māori health outcomes as the tribunal found and officially documented. The tribunal in Wai 2522 reinforced that Māori Data is a Taonga, affirming Māori sovereignty over Māori data as documented in Privacy Commissioner presentations. The ManageMyHealth breach is the direct result of the Crown’s continued failure to honor tino rangatiratanga over Māori health data.

Hidden Connection #3: From Transport Ideology to Health Destruction—One Minister, Same Pattern

Simeon Brown did not arrive at Health as a blank slate. He came trailing smoke from his tenure as Transport Minister, where he was described as “probably the most fanatically ideological transport minister New Zealand has ever seen” for his crusade against evidence-based walking and cycling infrastructure as Greater Auckland documented. That analysis concluded his policies would inevitably lead to “unneeded deaths of Kiwis on our roads” and characterized him as “impervious to evidence and callous, utterly unfit to manage anything where wellbeing is impacted.”

Brown gutted $465 million in cycling and walking funding (a fraction of $22 billion for roads) that could have saved billions in healthcare costs through reduced cancer, diabetes, and heart disease as Dr David Tripp and researchers told 1News. The Ministry of Transport’s former Chief Scientific Advisor Simon Kingham offered to provide advice on the Government Policy Statement but was told it was “being held very tight” and his input wasn’t required—meetings with the minister stopped entirely when the coalition government took power as 1News reported.

Brown misrepresented international evidence, citing countries with 50km/h urban speed limits while omitting that those countries allow municipalities to lower limits and implement extensive 30km/h zones, safe infrastructure, and cycling lanes as Greater Auckland exposed and The Conversation documented. When confronted, Brown claimed New Zealanders were “sick and tired” of cycleways—a statement contradicted by survey evidence showing widespread public support.

The same pattern defines his health tenure: ideology trumps evidence, experts are dismissed, and accountability is deflected. Brown himself admitted “I’m not from the sector, and I’m not a union organiser” when appointed Health Minister as he stated on LinkedIn and reported by 1News. His qualifications? A Commerce and Law degree, a stint at BNZ, and service as a Local Board member as his official biography states. No health training. No clinical experience. Just ideological certainty and a track record of ignoring expertise, as University of Auckland analysis noted.

Multiple senior health leaders resigned under his watch—what doctors described as a “bloodbath”—including Director-General of Health Dr Diana Sarfati and Health NZ Chief Executive Margie Apa as RNZ reported and 1News documented. The Association of Salaried Medical Specialists accused him of “unlawful intervention” in collective bargaining, demonstrating he “does not understand employment law” as the ASMS stated. When Brown claimed 4,000 surgeries were cancelled due to strikes, an OIA revealed the actual figure was 1,037—yet Health NZ couldn’t locate comparative data for normal cancellation rates.

Hidden Connection #4: Double Standards—Māori Scrutiny, Corporate Impunity

The Crown’s treatment of Māori data versus corporate data exposes whose interests it serves. Stats NZ announced the end of traditional Census in favor of administrative data collection, prompting Māori data specialists to question whether the Crown would restart capturing iwi information on birth certificates and whether iwi would receive funding for their own Census as Taria Walsh and Caleb Moses discussed with TVNZ’s Marae. Māori data specialists were not consulted when the government expanded facial recognition technology as RNZ reported, despite Wai 2575 affirming Māori data sovereignty.

Meanwhile, ManageMyHealth operated with baseline security failures across three countries for years. No proactive government audit. No enforcement of modern standards. Only after hackers threatened to release 400,000+ files did Brown commission a review that wouldn’t even begin until the end of January as the government announced and RNZ reported.

Brown says “people who hold data are responsible for that” and “it is the agency that holds that data that has responsibility” as quoted by Security Brief. Yet his government cut the very IT workforce whose job was ensuring that responsibility was met. Minister, PSA at odds over health info delays was the headline as the ODT reported when Brown blamed officials for slow OIA responses while his government slashed the staff needed to process them. Labour’s Carmel Sepuloni observed: “He can’t keep demanding savings and then blame officials when the impacts of cuts are felt.”

Hidden Connection #5: The Quantified Harm—Who Bleeds, Who Profits

Direct Harms:

126,000 patients data compromised as ManageMyHealth confirmed and 1News reported
400,000+ files stolen including clinical notes, lab results, passport details, intimate photos as RNZ documented
45 Northland GP practices affected, 355 “referral-originating” practices across regions as Newstalk ZB reported from court documents
Data dating back 6-8 years, some to 2017 as 1News stated
Sexual violence and family harm survivors face re-traumatization risk as RNZ highlighted

Māori-Specific Harms:
Māori in Northland already face diabetes rates 4x higher than Pākehā, and Māori die on average a decade earlier from heart disease as Sir Collin Tukuitonga documented and 1News reported. The breach compounds these inequities by shattering trust between Māori patients and the health system, violating the mana of those whose whakapapa and wairua are embedded in their health journeys.

Systemic Harms:

2000+ Health NZ jobs cut with Māori and Pacific workers disproportionately affected as Kaitiaki Nursing reported
Entire Māori health team disestablished as documented by Kaitiaki
6000+ public servants lost jobs with adverse mental health outcomes as Dr Clive Aspin noted

Who Profits:
Private contractors like Datacom hired to fill IT gaps at crisis rates. Health NZ shifted to greater outsourcing of elective surgeries to private sector as Brown announced and 1News reported. Brown called this a “slippery slope towards private healthcare” as PSA and RNZ documented.

Tikanga Violated, Rangatiratanga Denied

Mana: The breach violates the mana of 126,000 people whose most intimate health information—including photos of bodies, sexual health records, mental health histories—is now tradeable on criminal markets. For Māori, health data is not mere information but part of whakapapa, connected to wairua and the collective wellbeing of whānau.

Kaitiakitanga: The Crown failed its kaitiaki duty to protect Māori health data. No Māori governance or oversight existed when the breach occurred. Corporate custodianship failed, with no Māori-controlled backup systems to honor data sovereignty.

Tino Rangatiratanga: Wai 2575 affirmed Māori rights to authority over Māori health as the tribunal found. The government’s dismantling of Te Aka Whai Ora and weakening of iwi-Māori Partnership Boards directly violates this. The breach demonstrates precisely why Māori data sovereignty is essential—not as a nice-to-have consultation box-tick, but as the difference between protection and exploitation.

Whanaungatanga: Trust between Māori patients and the health system has been shattered. The collective harm extends to wh膩nau whose health journeys are now exposed, weakening the relational bonds essential to Māori health engagement. Many patients discovered their data was still being uploaded to ManageMyHealth two years after their GP stopped using it as RNZ reported, and some victims found most of their 100+ medical documents had vanished from the portal as the NZ Herald documented.

The Verdict

Simeon Brown stands in the wreckage calling for reviews while holding the axe that felled the defenses. This is not incompetence—it is ideologically driven dismantling. The same pattern that gutted road safety expertise and cycling infrastructure in Transport now guts IT security and Māori health governance in Health. The same contempt for evidence that ignored the Ministry of Transport’s Chief Scientific Advisor now ignores nearly 98% of health IT experts warning of patient harm.

The ManageMyHealth breach is a mirror held up to this government’s priorities, and the reflection is clear: private profit over patient protection, cost-cutting over Crown obligations, corporate impunity over Māori accountability.

126,000 New Zealanders—disproportionately Māori from Northland—now live with the knowledge that their most intimate health secrets are traded on criminal markets. Not because the hack was sophisticated, but because the government systematically destroyed the expertise meant to prevent it while dismantling Māori health authority guaranteed under Te Tiriti.

He aha te mea nui o te ao? He tangata, he tangata, he tangata.

What is the most important thing in the world? It is people, it is people, it is people.

Unless you are Simeon Brown. Then it is ideology, it is cost-cutting, it is corporate profit.

Ivor Jones The Māori Green Lantern Fighting Misinformation And Disinformation From The Far Right

Research transparency: This analysis used search_web (200+ sources), search_files_v2, and get_url_content tools. Research conducted January 9, 2026. All URLs verified active. Unverifiable claims disclosed where found. Citations spot-checked across government archives, tribunal reports, peer-reviewed journals, and established news outlets following the source hierarchy specified in operating guidelines.

"HE PĀTIKI KEI RARO I TE REPO — The Flounder in the Mud: How Damien Grant's Selective Conscience Exposes the Rotting Heart of Pākehā Media Power" - 22 March 2026

"THE CROWN'S DIGITAL TOHU: How a Rogue Neoliberal Government Sold the Whakapapa of a Nation to the Highest Unvetted Bidder" - 22 March 2026

"THE TONGUE THAT FEEDS THE BEAST: How a Neoliberal Vichy Government Handed Aotearoa's Mana to a War Machine Built on Lies - And Joe Kent Broke Them" - 22 March 2025

"THE HOLLOW MARAE: How Te Pāti Māori's Leadership Built a Palace of Silence on the Bones of Its Own People" - 20 March 2026