The cyber attack on Waikato District Health Board (DHB) is the latest in a string of events to test emergency planning protocols, Tairāwhiti health bosses say.
Hauora Tairāwhiti chief executive Jim Green. Photo: LDR/ /The Gisborne Herald/ Paul Rickard
At least five Tairāwhiti patients who would normally have been flown to Waikato Hospital were sent to other hospitals following the ransomware attack on the DHB's medical systems on 18 May.
Two were flown to Tauranga, two to Auckland and one to Palmerston North.
Hauora Tairāwhiti chief executive Jim Green said others had also been affected - those who usually drove or flew to Waikato for scheduled treatment.
Hauora Tairāwhiti had "severed" links with Waikato DHB systems and applications to prevent any infections attacking its own patient systems, Green said.
A report before the health board on Tuesday said patients in Tairāwhiti with heart attacks had to be flown to Tauranga.
"The need to quickly arrange alternative pathways was a test of emergency planning protocols," the report said.
"We are getting plenty of testing of this nature with recent events such as earthquakes, volcanic eruptions and a pandemic."
It follows a malware attack from the Zeppelin virus that resulted in the shutdown of most of Waikato DHB's key IT and phone systems, a move back to manual processes and surgeries being delayed.
In an update to Hauora Tairāwhiti DHB on Tuesday, Green said the attack had been extremely disruptive to Waikato's network of hospitals but had also impacted "quite a lot" on Tairāwhiti's use of its services.
"Primarily that has been around people who have heart attacks," Mr Green said.
"In the main, those people have been going to Bay of Plenty DHB and also to Wellington if there were capacity issues.
"That's been the most major impact."
Photo: RNZ / Andrew McRae
Other impacts on Tairāwhiti people had been around planned care and radiotherapy.
"We know Waikato DHB is now back up to around 80 percent of its normal planned care capacity ... so that will be impacting Tairāwhiti people.
"The third area of particular interest for us is around people requiring radiotherapy. The radiotherapy service at Waikato has been out for this whole period."
For Tairāwhiti patients requiring more urgent radiotherapy, that meant going to Tauranga or Wellington instead.
A report that came before board members said a "scheme of destinations" was arranged between Waikato, other Te Manawa Taki (Midland) DHBs and those in Auckland and Wellington.
People needing to be transferred were firstly discussed by the relevant team at Waikato, then referred to the pre-determined site.
Green said colleagues in Waikato were working to minimise the impact on patients, including those Tairāwhiti would normally send to Hamilton for treatment.
"Our clinical staff are liaising with their Waikato counterparts. Together they agree on the best pathway to care for affected patients.
"In some cases, this means the patient is transferred to another hospital.
"Thanks to other DHBs such as Bay of Plenty and Auckland, who have supported us to ensure patients get the specialist treatment and care they need."
Hauora Tairāwhiti followed the Ministry of Health advice and stopped the use of applications hosted by Waikato DHB and disabled access for Waikato's remote users.
This aligned with the steps taken by other DHBs.
Hauora Tairāwhiti staff were reminded of what to look out for when using email, which was on top of the normal protocol where all emails sent to employees from external accounts come with a "cyber security warning" banner.
In response to the incident at Waikato DHB, Hauora Tairāwhiti confirmed its existing backup routines and processes had operated as expected and that data was secured appropriately should there be a need for the recovery exercise.
It had ensured its security products were up to date and was regularly checking systems and applications to detect any dormant or active malware presence.
It also deployed security updates as soon as these became available and restricted inbound connections by default to only allow connections from trusted network management hosts.
Waikato DHB is working with the Privacy Commissioner, National Cyber Security Centre and GCSB (Government Communications Security Bureau) to investigate the incident.
Local Democracy Reporting is a public interest news service supported by RNZ, the News Publishers' Association and NZ On Air.