In a post to its website, dated “January 2026″, the company said a “small” amount of data was copied. “There continues to be some uncertainty as to the precise data and individuals that may have been affected,” Canopy said. “At this stage, we are not aware of there being any evidence that any of the potentially affected information has been shared or posted online,” the company said. “On July 18, 2025, Canopy Healthcare identified that an unknown person temporarily obtained unauthorised access to a part of our systems used by our administration team. Health Minister Simeon Brown told the Herald in a statement:“The Privacy Act 2020 and the Health Information Privacy Code set out requirements that Canopy Healthcare is obligated to comply with.
