newsroom.co.nz Investigation Launched After Cyber Attack on Coronial and Health Files
Article Content
- •14,500 coronial files and 4,000 post-mortem reports compromised in a cyber attack.
- •The breach involves the external IT provider Mercury IT, affecting multiple regions in New Zealand.
- •An investigation by the Privacy Commissioner's office is underway to assess the extent of the breach.
A cyber attack has compromised access to 14,500 coronial files and 4,000 post-mortem reports, affecting data from multiple regions in New Zealand. The Ministry of Justice and Te Whatu Ora confirmed that the breach involved an external IT provider, Mercury IT. The data includes sensitive information related to deceased individuals from November 2018 to November 2022. The Privacy Commissioner's office has been notified and is conducting a compliance investigation to assess the extent of the breach. Currently, it remains unclear how many families are affected or if any data has been stolen. Digital security experts are involved in a thorough investigation to understand the implications of this incident. The Ministry has not disclosed specific details about the nature of the data compromised, citing the sensitive nature of the information.
Ask AI about this cluster
Answers cite the sources they use
More articles in this cluster (2)
Following this threat?
Track Chiropractic Board in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of files were compromised?
Who is conducting the investigation?
Is there a risk of data theft?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…