New Zealand

US broker DriveWealth breached via social engineering; data of Revolut, Stake and other platform customers exposed

According to TNW, DriveWealth, the US broker behind US stock trading in Revolut and other apps, said an unauthorized party entered its network on September 4 and 5 through social engineering, and platforms such as Stake and Hatch have notified customers .

Mathspace said attackers exploited a vulnerability in its self-hosted Metabase internal reporting system to gain admin access, with access dating back to August 10 and data downloaded from its Australian reporting database on August 27; Metabase had released patches on August 6, but Mathspace only updated on August 29 .

According to New Zealand public broadcaster RNZ, a malicious actor downloaded occupational health and safety personal data belonging to Health NZ staff .

According to New Zealand public broadcaster RNZ, the Wellington Cable Car website was compromised .