The Head Hunters' ghost unit, which was hired to kidnap Jindarat Prutsiriporn last year. Photo / Supplied
The Head Hunters' ghost unit, which was hired to kidnap Jindarat Prutsiriporn last year. Photo / Supplied
Vehicle Testing New Zealand has increased its audits after its database was deliberately and consciously breached by an employee with links to the Head Hunters' ghost unit.
VTNZ's general manager of operations Greg O'Connor said the customer service representative regularly accessed customer information via the VTNZ database.
"This was a deliberate and conscious breach of the system by someone who knows how it works," he said.
The VTNZ employee left before the company's disciplinary process had been completed, O'Connor said.
"In the case in question, we acted as soon as we were notified by police about the potential of a breach of our systems and we worked closely with them on their investigation," he said.
"Unauthorised access of client information is a serious breach of our policies and procedures and goes against the training all VTNZ staff must go through. We will not hesitate to act and we have disciplined people who breach our policies."
A VTNZ employee disclosed the personal information of a police informant to the ghost unit after running their number plate in the company's database. Photo / File
O'Connor said everyone in the organisation feels "disappointed and let down" by the incident and a review of its policies and processes was conducted.
"Every staff member has always been required to complete an annual declaration confirming they understand and adhere to VTNZ's code of ethics," he said.
"All new employees must also complete and pass training that includes our privacy policy and how to deal with customer information."
He said since the ghost unit incident, VTNZ has also increased its audit and procedural controls.
"We're always looking for ways to improve the way we manage customer information, and are already speaking to the Privacy Commissioner. We welcome the involvement of his office and if needed, we will make improvements to our systems and processes," O'Connor said.
Jindarat Prutsiriporn, 50, died after falling from a car boot during a kidnapping in March last year. Photo / Supplied
Privacy Commissioner John Edwards today said he will be asking VTNZ for more details, and for an explanation of the security processes and procedures in place.
Edwards said he was very concerned about Justice Matthew Palmer's findings, when the judge sentenced six men in relation to Prutsiriporn's kidnapping and death yesterday in the High Court at Auckland.
"A captain in the Head Hunters was later able to obtain the name and address of the passerby who called, through a source in Vehicle Testing New Zealand, from the licence plate of the car in which he passed by," Justice Palmer said.
No charges were laid against the employee of the largest vehicle inspection company in New Zealand.
Members and associates of the ghost unit, guarded by Corrections staff, were jailed for their part in the kidnapping. Photo / Doug Sherring
Prutsiriporn was later kidnapped during a second attempt on February 29, 2016 when she was lured into a ute under the guise of a drug deal.
She was then tied up, gagged, and held at several Auckland locations by the gang for the next 22 hours.
