Cyber attack on HCC leaks personal and financial information

Report from LDR by Justin Wong A March cyber attack on the Hutt City Council has exposed the identities and financial information of hundreds of people to hackers.

The council has confirmed the phishing attack compromised the identity information of five people, and 732 people might have had financial information compromised through email correspondence.

They called the incident “deeply regrettable”, adding all those affected had been contacted and notified of the steps to be taken in response.

“We unreservedly apologise to anyone affected by this attack. Any exposure of personal information is not acceptable,” the council said.

“As criminals use AI to carry out more frequent and sophisticated attacks, they can automate scams, avoid detection, and adapt to security measures. This makes strong monitoring, quick response, and clear reporting essential to protect our systems.”

Chief executive Jo Miller said todayyy the council had reported the incident to the Office of the Privacy Commissioner.

“We are sorry this has occurred and acknowledge the concern it may have caused. It’s a reminder to us of the need to handle data with sufficient care. We want to reassure the community that additional safeguards have been put in place and system security strengthened.

We have brought forward our work programme that includes further mitigations to protect council information and prevent any further attack of this nature.”

Local Democracy Reporting (LDR) is local body journalism co-funded by RNZ and NZ On Air