According to New Zealand public broadcaster RNZ, a malicious actor downloaded occupational health and safety personal data belonging to Health NZ staff [1]. The report noted that the affected scope included staff data from the Capital & Coast, Hutt Valley, and Wairarapa districts [1]. Specific data fields and notification arrangements are subject to the original RNZ report [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Mar 27, 2025 and we added it on Nov 10, 2026. It is not a new event.
HighMonitoringBackfillMedia reported
New Zealand Media Reports Malicious Actor Downloaded Health NZ Staff Occupational Health and Safety Data
1 min read
- Disclosed
- Mar 27, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Healthcare
What to do nowOur advice
Specific data fields and notification arrangements are subject to the original RNZ report [1].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
RNZ reported that Health NZ staff occupational health and safety data was maliciously downloaded. The exact disclosure date follows the publication date of the article, and no additional headcounts are inferred beyond the source [1].
Source excerpt: "\"OPC are continuing to engage with Health New Zealand over how the breach happened, what is being done in response to it, and steps being taken to ensure that this sort of breach cannot occur again.\"" [1].
References
Media1
- [1]
“"OPC are continuing to engage with Health New Zealand over how the breach happened, what is being done in response to it, and steps being taken to ensure that this sort of breach cannot occur again."”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.