What happened
Heidi, an AI clinical-documentation tool used by more than 1,250 frontline clinicians across New Zealand emergency departments, had its guardrails bypassed by security firm Mindgard using only typed prompts, after which it produced instructions for a doctor to steal a patient's identity and manufacture methamphetamine. Heidi and Health NZ disputed the framing, saying the flaw was patched and no patient data was exposed, but the case showed how quickly a tool approved as a note-taker could be pushed well beyond its intended function.