NZ Herald
  • Home
  • Latest news
  • Herald NOW
  • Video
  • New Zealand
  • Sport
  • World
  • Business
  • Entertainment
  • Podcasts
  • Quizzes
  • Opinion
  • Lifestyle
  • Travel
  • Viva
  • Weather

Subscriptions

  • Herald Premium
  • Viva Premium
  • The Listener
  • BusinessDesk

Sections

  • Latest news
  • New Zealand
    • All New Zealand
    • Crime
    • Politics
    • Education
    • Open Justice
    • Scam Update
  • Herald NOW
  • On The Up
  • World
    • All World
    • Australia
    • Asia
    • UK
    • United States
    • Middle East
    • Europe
    • Pacific
  • Business
    • All Business
    • MarketsSharesCurrencyCommoditiesStock TakesCrypto
    • Markets with Madison
    • Media Insider
    • Business analysis
    • Personal financeKiwiSaverInterest ratesTaxInvestment
    • EconomyInflationGDPOfficial cash rateEmployment
    • Small business
    • Business reportsMood of the BoardroomProject AucklandSustainable business and financeCapital markets reportAgribusiness reportInfrastructure reportDynamic business
    • Deloitte Top 200 Awards
    • CompaniesAged CareAgribusinessAirlinesBanking and financeConstructionEnergyFreight and logisticsHealthcareManufacturingMedia and MarketingRetailTelecommunicationsTourism
  • Opinion
    • All Opinion
    • Analysis
    • Editorials
    • Business analysis
    • Premium opinion
    • Letters to the editor
  • Politics
  • Sport
    • All Sport
    • OlympicsParalympics
    • RugbySuper RugbyNPCAll BlacksBlack FernsRugby sevensSchool rugby
    • CricketBlack CapsWhite Ferns
    • Racing
    • NetballSilver Ferns
    • LeagueWarriorsNRL
    • FootballWellington PhoenixAuckland FCAll WhitesFootball FernsEnglish Premier League
    • GolfNZ Open
    • MotorsportFormula 1
    • Boxing
    • UFC
    • BasketballNBABreakersTall BlacksTall Ferns
    • Tennis
    • Cycling
    • Athletics
    • SailingAmerica's CupSailGP
    • Rowing
  • Lifestyle
    • All Lifestyle
    • Viva - Food, fashion & beauty
    • Society Insider
    • Royals
    • Sex & relationships
    • Food & drinkRecipesRecipe collectionsRestaurant reviewsRestaurant bookings
    • Health & wellbeing
    • Fashion & beauty
    • Pets & animals
    • The Selection - Shop the trendsShop fashionShop beautyShop entertainmentShop giftsShop home & living
    • Milford's Investing Place
  • Entertainment
    • All Entertainment
    • TV
    • MoviesMovie reviews
    • MusicMusic reviews
    • BooksBook reviews
    • Culture
    • ReviewsBook reviewsMovie reviewsMusic reviewsRestaurant reviews
  • Travel
    • All Travel
    • News
    • New ZealandNorthlandAucklandWellingtonCanterburyOtago / QueenstownNelson-TasmanBest NZ beaches
    • International travelAustraliaPacific IslandsEuropeUKUSAAfricaAsia
    • Rail holidays
    • Cruise holidays
    • Ski holidays
    • Luxury travel
    • Adventure travel
  • Kāhu Māori news
  • Environment
    • All Environment
    • Our Green Future
  • Talanoa Pacific news
  • Property
    • All Property
    • Property Insider
    • Interest rates tracker
    • Residential property listings
    • Commercial property listings
  • Health
  • Technology
    • All Technology
    • AI
    • Social media
  • Rural
    • All Rural
    • Dairy farming
    • Sheep & beef farming
    • Horticulture
    • Animal health
    • Rural business
    • Rural life
    • Rural technology
    • Opinion
    • Audio & podcasts
  • Weather forecasts
    • All Weather forecasts
    • Kaitaia
    • Whangārei
    • Dargaville
    • Auckland
    • Thames
    • Tauranga
    • Hamilton
    • Whakatāne
    • Rotorua
    • Tokoroa
    • Te Kuiti
    • Taumaranui
    • Taupō
    • Gisborne
    • New Plymouth
    • Napier
    • Hastings
    • Dannevirke
    • Whanganui
    • Palmerston North
    • Levin
    • Paraparaumu
    • Masterton
    • Wellington
    • Motueka
    • Nelson
    • Blenheim
    • Westport
    • Reefton
    • Kaikōura
    • Greymouth
    • Hokitika
    • Christchurch
    • Ashburton
    • Timaru
    • Wānaka
    • Oamaru
    • Queenstown
    • Dunedin
    • Gore
    • Invercargill
  • Meet the journalists
  • Promotions & competitions
  • OneRoof property listings
  • Driven car news

Puzzles & Quizzes

  • Puzzles
    • All Puzzles
    • Sudoku
    • Code Cracker
    • Crosswords
    • Cryptic crossword
    • Wordsearch
  • Quizzes
    • All Quizzes
    • Morning quiz
    • Afternoon quiz
    • Sports quiz

Regions

  • Northland
    • All Northland
    • Far North
    • Kaitaia
    • Kerikeri
    • Kaikohe
    • Bay of Islands
    • Whangarei
    • Dargaville
    • Kaipara
    • Mangawhai
  • Auckland
  • Waikato
    • All Waikato
    • Hamilton
    • Coromandel & Hauraki
    • Matamata & Piako
    • Cambridge
    • Te Awamutu
    • Tokoroa & South Waikato
    • Taupō & Tūrangi
  • Bay of Plenty
    • All Bay of Plenty
    • Katikati
    • Tauranga
    • Mount Maunganui
    • Pāpāmoa
    • Te Puke
    • Whakatāne
  • Rotorua
  • Hawke's Bay
    • All Hawke's Bay
    • Napier
    • Hastings
    • Havelock North
    • Central Hawke's Bay
    • Wairoa
  • Taranaki
    • All Taranaki
    • Stratford
    • New Plymouth
    • Hāwera
  • Manawatū - Whanganui
    • All Manawatū - Whanganui
    • Whanganui
    • Palmerston North
    • Manawatū
    • Tararua
    • Horowhenua
  • Wellington
    • All Wellington
    • Kapiti
    • Wairarapa
    • Upper Hutt
    • Lower Hutt
  • Nelson & Tasman
    • All Nelson & Tasman
    • Motueka
    • Nelson
    • Tasman
  • Marlborough
  • West Coast
  • Canterbury
    • All Canterbury
    • Kaikōura
    • Christchurch
    • Ashburton
    • Timaru
  • Otago
    • All Otago
    • Oamaru
    • Dunedin
    • Balclutha
    • Alexandra
    • Queenstown
    • Wanaka
  • Southland
    • All Southland
    • Invercargill
    • Gore
    • Stewart Island
  • Gisborne

Media

  • Video
    • All Video
    • NZ news video
    • Herald NOW
    • Business news video
    • Politics news video
    • Sport video
    • World news video
    • Lifestyle video
    • Entertainment video
    • Travel video
    • Markets with Madison
    • Kea Kids news
  • Podcasts
    • All Podcasts
    • The Front Page
    • On the Tiles
    • Ask me Anything
    • The Little Things
  • Cartoons
  • Photo galleries
  • Today's Paper - E-editions
  • Photo sales
  • Classifieds

NZME Network

  • Advertise with NZME
  • OneRoof
  • Driven Car Guide
  • BusinessDesk
  • Newstalk ZB
  • Sunlive
  • ZM
  • The Hits
  • Coast
  • Radio Hauraki
  • The Alternative Commentary Collective
  • Gold
  • Flava
  • iHeart Radio
  • Hokonui
  • Radio Wanaka
  • iHeartCountry New Zealand
  • Restaurant Hub
  • NZME Events

SubscribeSign In
Advertisement
Advertise with NZME.
Home / Business

Ransomware attacks: Are stolen Justice, health, insurance files appearing on the dark web?

Chris Keall
By Chris Keall
Technology Editor/Senior Business Writer·NZ Herald·
7 Dec, 2022 04:20 AM4 mins to read

Subscribe to listen

Access to Herald Premium articles require a Premium subscription. Subscribe now to listen.
Already a subscriber?  Sign in here

Listening to articles is free for open-access content—explore other articles or learn more about text-to-speech.
‌
Save

    Share this article

    Reminder, this is a Premium article and requires a subscription to read.

Photo / Getty Images

Photo / Getty Images

There’s good news and bad news about a sweeping series of ransomware attacks on Government and business sites.

The good: Brett Callow, a threat analyst with ransomware specialist Emsisoft has been monitoring the dark web, and says there is still no sign of data from any of the affected organisations being published online. Hackers often place small samples of sensitive data on the web in a bid to pressure a victim into paying up.

Callow has been monitoring the dark web since Friday, when the Herald first reported the wave of attacks.

The bad: authorities and organisations that have been hit are still unsure of the extent of the attack and what sensitive data could have been stolen.

Yesterday, new Privacy Commissioner Michael Webster confirmed a Herald report that Wellington-based managed services provider (MSP) Mercury IT had been hit by a ransomware attack.

Advertisement
Advertise with NZME.

That potentially compromised sensitive data it hosts for multiple clients, including health insurer Accuro, BusinessNZ, the NZ National Nurses Association, the Ministry of Justice - with 15,000 Coroners Court files taken out - and contractors to Te Whatu Ora, Health NZ - the entity charged with managing the centralised health system in the post-DHB era.

Callow says: “Managed service providers like Mercury IT can act as a gateway to their customers’ networks, and for this reason are a high-value target for ransomware actors.”

He adds, “We’ve seen multiple incidents like this in the past, including an incident in which REvil was able to encrypt the systems of 22 municipalities in Texas after compromising the MSP they used. Because of the risks, the UK is introducing mandatory reporting for MSPs as well as additional security requirements. This is something the New Zealand government should be considering too.”

Advertisement
Advertise with NZME.

The Herald has asked the Privacy Commissioner for comment.

An update to the Privacy Act in 2020 made it compulsory for individual organisations to report any data breach to the Privacy Commissioner, and Webster said he was planning a compliance investigation into the Mercury IT incident.

Discover more

Business

Pinnacle Health hack: Sensitive files posted to the dark web

09 Oct 04:00 PM
Official Cash Rate

Revealed: The number of Kiwi businesses that would pay a cyber ransom

29 May 05:00 AM
New Zealand

Waikato DHB cyber attack: 4200 people's personal details disclosed on dark web

10 Sep 04:33 AM
Business

Spy agency says 170,000 cyberattacks launched on NZ

19 Sep 05:35 AM

But the Government has resisted measures such as big fines on companies with lax data security, or making it illegal to pay a cyber-ransom, and Budget 2022 was thin on cybersecurity spending - particularly compared to across the Tasman.

National says it’s still in the process of formulating its ICT policy, which will be released next year.

GCSB leads response, Privacy Commissioner investigates

The GCSB’s National Cyber Security Centre is leading the response, supported by the police and Cert NZ. The Herald first reported elements of the attack last Friday.

“This is an evolving situation,” the Privacy Commissioner’s office said. “We were notified of the cyber security attack on November 30. Urgent work is under way to understand the number of organisations affected, the nature of the information involved and the extent to which any information has been copied out of the system.

“The Office of the Privacy Commissioner is planning on opening a compliance investigation into this incident so that it can make full use of its information-gathering powers.

“We encourage any clients of Mercury IT who have been impacted by this incident and who have not already been in touch with us to contact the Office of the Privacy Commissioner.”

Advertisement
Advertise with NZME.

Mercury IT director Corry Tierney said senior management and relevant Government authorities were made aware immediately a “malicious and unauthorised actor” had gained access to the company’s servers.

“We have engaged external specialist support,” he said.

“Our response to understand how this occurred, and address the impacts, is at an early stage; however, all possible steps have been taken to secure our environment.

“We are committed to supporting our impacted clients with their own investigations wherever possible and we apologise, sincerely, for the impact this attack has caused.”

Through a spokesman, Tierney refused to answer any questions.

“We cannot provide further information on the impact and our mitigation at this time as the actors behind this incident, or others, can leverage any publicly available information,” he said.

A "malicious and unauthorised actor" gained access to the company's servers. Photo / 123rf
A "malicious and unauthorised actor" gained access to the company's servers. Photo / 123rf

The Ministry of Justice said yesterday a cyber attack had blocked access to 14,500 coronial files and around 4000 post-mortem examination reports, the Ministry of Justice has confirmed.

About 30,000 customers of health insurer Accuro have had personal data potentially exposed via the attack on Mercury IT.

The Nurses Association has about 55,000 members.

The Privacy Commissioner warned people not to share any information spilled online.

“For individuals - be on the lookout for anything out of the ordinary. Watch out for suspicious texts, emails or unusual things happening with your accounts or records. Be particularly cautious of contact from an unknown source,” the Commissioner said. The agency has posted protection tips online here.


Save

    Share this article

    Reminder, this is a Premium article and requires a subscription to read.

Latest from Business

Premium
Property

'Grit their teeth': Sweeney on Dubliners living on proposed MetroLink route

07 Jul 03:05 AM
Premium
Companies|tourism

Why former SkyCity execs are being sued for breach of duties

07 Jul 01:56 AM
Premium
Business

Costly vacancy: $2.2m bill for early end to Labour's Three Waters lease

07 Jul 12:00 AM

Audi offers a sporty spin on city driving with the A3 Sportback and S3 Sportback

sponsored
Advertisement
Advertise with NZME.

Latest from Business

Premium
'Grit their teeth': Sweeney on Dubliners living on proposed MetroLink route

'Grit their teeth': Sweeney on Dubliners living on proposed MetroLink route

07 Jul 03:05 AM

'I would have preferred to stay in New Zealand,' says Sweeney.

Premium
Why former SkyCity execs are being sued for breach of duties

Why former SkyCity execs are being sued for breach of duties

07 Jul 01:56 AM
Premium
Costly vacancy: $2.2m bill for early end to Labour's Three Waters lease

Costly vacancy: $2.2m bill for early end to Labour's Three Waters lease

07 Jul 12:00 AM
Auckland University campus bookstore to close after going into liquidation

Auckland University campus bookstore to close after going into liquidation

06 Jul 11:18 PM
Gold demand soars amid global turmoil
sponsored

Gold demand soars amid global turmoil

NZ Herald
  • About NZ Herald
  • Meet the journalists
  • Newsletters
  • Classifieds
  • Help & support
  • Contact us
  • House rules
  • Privacy Policy
  • Terms of use
  • Competition terms & conditions
  • Our use of AI
Subscriber Services
  • NZ Herald e-editions
  • Daily puzzles & quizzes
  • Manage your digital subscription
  • Manage your print subscription
  • Subscribe to the NZ Herald newspaper
  • Subscribe to Herald Premium
  • Gift a subscription
  • Subscriber FAQs
  • Subscription terms & conditions
  • Promotions and subscriber benefits
NZME Network
  • The New Zealand Herald
  • The Northland Age
  • The Northern Advocate
  • Waikato Herald
  • Bay of Plenty Times
  • Rotorua Daily Post
  • Hawke's Bay Today
  • Whanganui Chronicle
  • Viva
  • NZ Listener
  • Newstalk ZB
  • BusinessDesk
  • OneRoof
  • Driven Car Guide
  • iHeart Radio
  • Restaurant Hub
NZME
  • About NZME
  • NZME careers
  • Advertise with NZME
  • Digital self-service advertising
  • Book your classified ad
  • Photo sales
  • NZME Events
  • © Copyright 2025 NZME Publishing Limited
TOP