Skip to content
Ransomware Attack on New Zealand's Compass Communications Exposes Customer Data

Ransomware Attack on New Zealand's Compass Communications Exposes Customer Data

First seen 9 Nov 2026, 12:10 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 9, 2026 at 12:10 UTC

Compass Communications, a telecommunications provider in Auckland, confirmed a ransomware attack by the RA World group, which claimed to have stolen 250 gigabytes of data. The stolen data reportedly includes sensitive customer information such as financial data and service agreements. A 26.9 MB sample of the stolen data was released, containing customer banking details. Compass detected unauthorized access to its systems and has engaged external security specialists while notifying the Privacy Commissioner. The company stated that it will inform affected customers directly if their information was compromised. The attack highlights the ongoing cybersecurity challenges faced by New Zealand's telecommunications sector, with Spark New Zealand also reporting multiple data breaches in recent years. The full extent of the impact remains unclear as Compass continues its investigation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Timeline

2024-12-01
Unauthorized access detected
Compass Communications identified unauthorized access to its systems and began an investigation.
Hackread
2026-11-09
Ransomware attack confirmed
Compass Communications confirmed the ransomware attack and the involvement of the RA World group.
Cyber Daily

More articles in this cluster (4)

Following this threat?

Track RA World and Compass Communications in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What type of data was stolen?
The stolen data includes financial information, customer details, and service agreements.
How is Compass responding to the attack?
Compass has engaged external security specialists and is notifying affected customers directly.
Is there a ransom demand?
No ransom amount has been disclosed, but a deadline for payment is set for January 1, 2025.