New Zealand central bank’s data system hacked

guest · Jan 10, 2021

New Zealand central bank’s data system hacked
January 10, 2021
https://www.lbc.co.uk/business/c4a57a18a45e4d1aae03e4c2c475d970/

New Zealand’s central bank said on Sunday that one of its data systems has been breached by an unidentified hacker who potentially accessed commercially and personally sensitive information.

A third party file-sharing service used by the Reserve Bank of New Zealand to share and store sensitive information has been illegally accessed, the Wellington-based bank said in a statement.
Governor Adrian Orr said the breach has been contained, and the bank’s core functions “remain sound and operational”.

“We are working closely with domestic and international cybersecurity experts and other relevant authorities as part of our investigation and response to this malicious attack,” Mr Orr said.
Click to expand...

The system has been secured and taken offline until the bank completes its initial investigations.

“It will take time to understand the full implications of this breach and we are working with system users whose information may have been accessed,” Mr Orr said.
Click to expand...

guest · Jan 12, 2021

New Zealand Reserve Bank breached using bug patched on Xmas Eve
January 12, 2021
https://www.bleepingcomputer.com/ne...-bank-breached-using-bug-patched-on-xmas-eve/

A recent data breach at the Reserve Bank of New Zealand, known as Te Pūtea Matua, was caused by attackers exploiting a critical vulnerability patched the same day.

Over the weekend, the Reserve Bank disclosed that they suffered a data breach after an attacker hacked a third-party file sharing service containing sensitive data.
In a new advisory released yesterday, the Bank states that the attackers breached their Accellion FTA file sharing service.

"A third party file sharing service provided by Accellion called FTA (File Transfer Application), used by the Bank to share and store some sensitive information, was illegally accessed."
"The system has been secured and taken offline while investigations are underway," the Reserve Bank stated in a new advisory.
Click to expand...

According to our sources, Accellion released the patch on December 24th, 2020, and that the Reserve Bank of New Zealand suffered the breach on December 25th.

With there being a 21 hour time difference between Accellion's California location and New Zealand, the breach likely occurred at around the same time or before the patch was released.
All of this occurring over the Christmas holiday further exacerbated the issue.
Click to expand...

guest · Jan 15, 2021

Reserve Bank of New Zealand apologizes for ‘significant’ data breach
Investigation continues into breach that resulted from attack against file-sharing service
January 15, 2021
https://portswigger.net/daily-swig/...ealand-apologizes-for-significant-data-breach

The Reserve Bank of New Zealand has apologized for a “malicious and illegal” breach of customer data after a cyber-attack on a third-party service.

The Daily Swig recently reported that the bank – also known by the Māori name of Te Pūtea Matua – suffered a data breach after an unknown actor gained unauthorized access to a third-party file-sharing service.
He added: “Personally, I own this issue and I am disappointed and sorry. Our investigation makes it clear we are dealing with a significant data breach.”
Click to expand...

In an earlier email to The Daily Swig, a spokesperson said they will not be releasing any further details.
Orr’s full statement can be viewed below: [...]
Click to expand...

guest · Jan 19, 2021

Questions raised by New Zealand central bank boss, following cyber attack investigation
January 19, 2021
https://www.computerweekly.com/news...ank-boss-following-cyber-attack-investigation

The governor of New Zealand’s central bank has raised questions about the organisation’s vulnerability, following a cyber attack it described as “significant”.

In its latest update, the bank said: “We are working closely with international and domestic cyber security experts and other relevant authorities as part of our investigation and response. The nature and extent of information that has been illegally downloaded is still being determined, but it may include some commercially and personally sensitive information.”
It added that its core functions remained “unaffected, sound and operational”.
Click to expand...

New Zealand’s National Cyber Security Centre (NCSC) published a report in November 2020 that said the country’s “nationally significant organisations continue to be the target of frequent cyber attacks from a range of malicious actors”.
Click to expand...

Log in or Sign up

New Zealand central bank’s data system hacked

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

New Zealand central bank’s data system hacked

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches