Genoapay and Gem Visa cyberattack worse than previously thought

Name: Mayor's threats against private landowners, long road for SH25A & Marama Davidson's u-turn | Focus Morning Bulletin: 28 March, 2023
Uploaded: 2023-03-28T05:43:37+13:00
Description: Auckland Mayor reveals emergency recovery plan, work continues on Coromandel highway cut off by landslides and cold snap hits the country in the latest New Zealand Herald headlines. Video / NZ Herald

RNZ

27 Mar, 2023 08:29 PM2 mins to read

Auckland Mayor reveals emergency recovery plan, work continues on Coromandel highway cut off by landslides and cold snap hits the country in the latest New Zealand Herald headlines. Video / NZ Herald

Financial company Latitude says the data of 7.9 million New Zealand and Australian drivers’ licences has been stolen, as it confirmed the cyberattack on its systems this month was worse than previously thought.

Latitude, which operates the Gem Visa and Genoapay companies and works with Kiwibank, first announced it had been hacked on March 16, saying it believed the data of around 330,000 people had been accessed.

On Monday it posted an update on the ASX that the data of 7.9 million driver licence numbers of its New Zealand and Australian customers had been stolen, of which about 40 per cent - 3.2 million - were shared with the lender in the past decade.

“In addition, approximately 53,000 passport numbers were stolen,” the company said.

“We have also identified less than 100 customers who had a monthly financial statement stolen.”

A Latitude spokesperson said they did not yet have information on how many New Zealanders’ data had been stolen.

It confirmed just over 2000 Kiwibank customers’ data had been stolen when the hack was first announced, but it was unclear whether more customers had been impacted than previously thought.

The company’s Gem Visa card offers interest-free deals at several major retailers, including Harvey Norman, Noel Leeming and Apple online.

The company said records dating back to at least 2005 had also been stolen, approximately 6.1 million records, 94 per cent of which were provided to the company before 2013.

“These records include some but not all of the following personal information: name, address, telephone, date of birth,” Latitude said.

Chief executive Ahmed Fahour said it was hugely disappointing that such a significant number of customers had been affected.

“We are committed to working closely with impacted customers and applicants to minimise the risk and disruption to them, including reimbursing the cost if they choose to replace their ID document,” he said.

“We are also committed to a full review of what has occurred.

“We urge all our customers to be vigilant and on the lookout for suspicious behaviour relating to their accounts.”