133 Molesworth Street
PO Box 5013
Wellington 6140
New Zealand
T+64 4 496 2000
30 June 2022
Scott
By email: [FYI request #19354 email]
Ref:
H202207702
Tēnā koe Scott
Response to your request for official information
Thank you for your request under the Official Information Act 1982 (the Act) to the Ministry of
Health (the Ministry) on 7 June 2022 regarding the Waikato District Health Board (DHB)
ransomware incident. You specifically requested:
“a copy of the close-out report or debrief for the Ministry's incident management response
to the Waikato DHB ransomware incident”.
The release of the information you have requested is likely to compromise the service user
information and the health and safety of patients, as well as disclose details that would increase
the security risk of Waikato DHB and other public health bodies. For this reason, the information
requested is withheld in full under the following sections of the Act:
• Section 6(c), as the release of the information is likely to prejudice the maintenance of
the law, including the prevention, investigation, and detection of offences, and the right
to a fair trial; and
• Section 9(2)(ba)(i), as it is necessary to protect information which is subject to an
obligation of confidence and making it available would likely prejudice the supply of
similar information or information from the same source; and
• Section 9(2)(c), as it is necessary to avoid prejudice to measures to protect the health or
safety of the public; and
• Section 9(2)(e), as it is necessary to avoid prejudice to measures that prevent or mitigate
material loss to members of the public.
I have considered the countervailing public interest in release in making this decision and
consider that it does not outweigh the need to withhold at this time
Under section 28(3) of the Act, you have the right to ask the Ombudsman to review any
decisions made under this request. The Ombudsman may be contacted by email at:
[email address] or by calling 0800 802 602.
Please note that this response, with your personal details removed, may be published on the
Ministry website at:
www.health.govt.nz/about-ministry/information-releases/responses-official-
information-act-requests.
Nāku noa, nā
Gaynor Bradfield
Manager, Office of the Deputy Director-General
Data and Digital
Page 2 of 2