Accuro, a New Zealand health insurer, says a cyber hack has compromised its ability to access systems but it's not yet known whether customer data is exposed.
The company said in a statement there was not yet evidence of personal health data being compromised but it could not be ruled out.
"Our IT provider is working with their own forensic experts and Government agencies to understand the nature and extent of the impact. We have also notified the relevant regulatory authorities including the Office of the Privacy Commissioner," Accuro said. "At this stage, we have no evidence that any Accuro data has been compromised but we cannot rule out this possibility. Our current focus is working with our IT provider to investigate and understand the situation further."
The company reiterated it took its obligations to protect customer privacy "very seriously".
"For the time being, our systems remain offline which will impact services and we request your patience as we work towards a solution," the statement said.
The Accuro hack followed a similar incident in Australia, where the country's biggest health insurer Medibank was hit by a cybercrime that compromised the data of about 4 million customers.
In October, private patient information which was stolen in a cyber attack targeting New Zealand GP provider Pinnacle Health was also uploaded online.