Documents from Waikato District Health Board appear to have been released onto the dark web after the ransomware attack that crippled five hospitals' IT systems in May.
RNZ has been shown screenshots of what appears to be a link to a directory of sensitive information.
Thelist of documents suggests it includes data of patients and staff.
It has been six weeks since a ransomware attack crippled its systems and forced a massive overhaul of its operations.
The ransomware attack brought the DHB's hospitals and services to a grinding halt and staff have had to resort to manual workarounds to continue caring for patients.
Some people needing specialist treatment have had to travel to other DHBs.
IT security expert Daniel Ayers told Midday Report he had a look at the file structure - without viewing personal information - and confirmed it is from the DHB.
