https://pwnsy.com/tools/cyber-watch/new-zealand/Sourced cyber incidents and official statements, from pwnsy Cyber Watch.enSun, 08 Nov 2026 00:00:00 +0000https://www.ncsc.govt.nz/alerts/chinese-government-linked-cyber-threat-actors-combine-automated-and-hands-on-hacking-tools-to-steal-sensitive-data/c6b1c31d7b14eb40Fri, 09 Oct 2026 00:00:00 +0000NCSC joined an international advisory on Chinese government-linked actors combining automated and hands-on hacking tools.https://www.privacy.org.nz/tuhono-connect/statements-media-releases/privacy-commissioner-issues-compliance-notices-to-manage-my-health-and-health-nz/60d9718878888c2aWed, 23 Sep 2026 00:00:00 +0000Privacy Commissioner issued compliance notices to Manage My Health and Health NZ.https://pwnsy.com/tools/cyber-watch/new-zealand/#alld00a06d840a83f79Thu, 03 Sep 2026 00:00:00 +0000Mathspace said stolen data covered students, parents and staff in Australia and New Zealand, 1,079,819 people in total. Sources: https://www.bleepingcomputer.com/news/security/mathspace-discloses-data-breach-affecting-over-1-million-people/https://pwnsy.com/tools/cyber-watch/incidents/mathspace-data-breach/8e6aeea5a7fe2aa1Thu, 03 Sep 2026 00:00:00 +0000Mathspace says attackers used a Metabase flaw to steal names and emails of 1,079,819 students, parents and staff in Australia and New Zealand.https://pwnsy.com/tools/cyber-watch/new-zealand/#allbcba86ae96f1171bFri, 03 Jul 2026 00:00:00 +0000Kairos listed the New Zealand arm of the textile wholesaler on 3 July and claimed to have stolen 386 GB of data. Sources: https://www.cyberdaily.au/security/14023-exclusive-kairos-ransomware-lists-warwick-fabrics-nz-as-hack-victimhttps://www.privacy.org.nz/tuhono-connect/statements-media-releases/privacy-commissioner-finds-manage-my-health-and-health-nz-breached-privacy-act/70a46fccf6ac48c6Wed, 27 May 2026 00:00:00 +0000Privacy Commissioner found Manage My Health and Health NZ breached the Health Information Privacy Code.https://pwnsy.com/tools/cyber-watch/new-zealand/#allf9dbb20ecc10cac9Sun, 24 May 2026 00:00:00 +0000Qilin listed the Auckland health supplements maker on its leak site on 24 May without publishing any data samples. Sources: https://www.insurancebusinessmag.com/nz/news/cyber/ransomware-group-adds-new-zealand-health-company-to-its-leak-site-576765.aspxhttps://pwnsy.com/tools/cyber-watch/new-zealand/#alld67dcbd7220c9e00Thu, 30 Apr 2026 00:00:00 +0000The Whangarei electrical contractor confirmed on 4 May a January cyber attack involving unauthorised access to a single device. The Mnt6 group listed McKay on its leak site on 30 April. Sources: https://www.cyberdaily.au/security/13537-exclusive-kiwi-electrical-contractor-confirms-cyber-attackhttps://pwnsy.com/tools/cyber-watch/new-zealand/#alld22b29eb658c498aWed, 29 Apr 2026 00:00:00 +0000The council said a March phishing attack gave unauthorised access to several staff email accounts. Five people had identity information compromised and 732 may have had financial information exposed. Sources: https://www.1news.co.nz/2026/04/29/financial-details-ids-leaked-in-lower-hutt-council-cyber-attack/https://pwnsy.com/tools/cyber-watch/new-zealand/#all147b6a9d5d4c2459Tue, 24 Feb 2026 00:00:00 +0000The medication management platform used by aged care and community providers confirmed unauthorised entry on 22 February. Some patient records were altered and the platform went offline while providers reverted to manual processes. Sources: https://www.rnz.co.nz/news/alert-nat/587773/patient-data-changed-as-major-nz-health-app-medimap-hackedhttps://pwnsy.com/tools/cyber-watch/new-zealand/#all3d4c4444d4b075f3Mon, 26 Jan 2026 00:00:00 +0000The Napier law firm said a malicious third party attacked its network on 11 January and extracted part of its file server, including client documents. Police and the Privacy Commissioner were notified. The Anubis ransomware group posted data it said was stolen from the firm. Sources: https://www.rnz.co.nz/news/national/585222/client-documents-caught-up-in-law-firm-cyber-attack, https://beyondmachines.net/event_details/anubis-ransomware-group-targets-new-zealand-law-firm-langley-twigg-y-v-p-s-phttps://www.privacy.org.nz/tuhono-connect/statements-media-releases/statement-on-manage-my-health-cyber-incident/6f40eeecadd062c0Wed, 21 Jan 2026 00:00:00 +0000Privacy Commissioner announced an inquiry into the Manage My Health breach.https://pwnsy.com/tools/cyber-watch/new-zealand/#all907aa125cd9cab58Mon, 12 Jan 2026 00:00:00 +0000Canopy Health, the largest private medical oncology provider, confirmed someone gained unauthorised access to part of its administration systems in July 2025 and some data may have been copied. Patients were told months later. Sources: https://www.rnz.co.nz/news/national/583813/second-health-provider-hit-in-major-cyber-attackhttps://pwnsy.com/tools/cyber-watch/new-zealand/#alle5290d7b97e2a2c8Thu, 01 Jan 2026 00:00:00 +0000Manage My Health notified the Privacy Commissioner on 1 January of a serious breach from December 2025; the Commissioner later found patient data of nearly 100,000 people was stolen and put up for sale. Sources: https://www.privacy.org.nz/tuhono-connect/statements-media-releases/statement-on-manage-my-health-cyber-incident/, https://www.privacy.org.nz/tuhono-connect/statements-media-releases/privacy-commissioner-finds-manage-my-health-and-health-nz-breached-privacy-act/