Why are we covering New Zealand? 1/2 Because New Zealand is a Five Eyes ally, and it's often where new tech gets tried first: digital health records, digital driver's licences, phone-based border travel. What happens there tends to show up here later. On 22 June 2025, a warning about exposed patient logins at Manage My Health, one of the country's main patient portals, went to the company and to the Privacy Commissioner. Our source says it was also blind-copied to the Prime Minister's personal inbox. More than four months later, MMH reset passwords and switched on 2FA for "the impacted users" only. In December 2025 a hacker logged in with a real patient's stolen password. 99,416 people had their documents taken. The Privacy Commissioner's own report says MFA was optional "despite the fact that, prior to the incident, there had been indicators of potential valid user credential exposure (such as a reported incident in June 2025)." CyberCX, reviewing the breach for the Ministry of Health: "This type of attack is neither technically sophisticated, nor particularly uncommon." Three warnings: December 2022, June 2025, November 2025. New Zealand votes on 7 November, while the same government pushes digital licences and phone-based travel across the Tasman.