Te Whatu Ora has revealed at least 12,000 people have had personal information plastered on the internet in part of last year's Covid-19 data breach.
Health New Zealand says a large number of vaccinators had their details posted in a downloadable file on a United States blogsite.
The agency has begun notifying individuals but says the numbers of people involved may grow.
Former employee Barry Young is facing court charges relating to the leak. He next appears in court next week.
Te Whatu Ora chief executive Margie Apa spoke to Charlotte Cook.
