ZaWoo Ransomware Group Targets Zenith Technology in Data Breach

• •Zenith Technology confirmed a data breach affecting sensitive health data.
• •ZaWoo ransomware group claimed responsibility and demanded Bitcoin for decryption.
• •67GB of data, including personal health information, was exfiltrated from Zenith's servers.

Zenith Technology, a Dunedin-based clinical trial company, has confirmed a cyberattack by the ZaWoo ransomware group, which resulted in the theft of sensitive health data. The attack was first reported on September 10, 2026, when files attributed to Zenith appeared online. The group claimed responsibility for the breach, demanding a ransom in Bitcoin while threatening to publish stolen data. Health New Zealand is assisting Zenith Technology, which has taken certain systems offline as a precaution. The breach involved the compromise of an internal server, with 67GB of data exfiltrated, including personal health information. The incident has raised concerns about compliance with the Privacy Act 2020, as Zenith processes data for various health sector principals. Police are currently investigating the matter, and the company is engaging cybersecurity experts to assess the situation.