Competenz, a training organisation in New Zealand, has confirmed that it suffered a cyber attack in June 2024, which resulted in unauthorised access to its IT systems and the theft of sensitive information.
The cyber attack resulted in the extraction of a range of data, including the personal information of some of the organisation’s previous and present learners, employers, staff, and business partners. The types of personal information stolen include contact details, names, dates of birth, birth certificates, passports, driver’s licences, and financial information, such as cards and bank account numbers.
In a post that was updated on Tuesday, Competenz said it has initiated steps to address the attack. These steps include:
- Engaging with independent cybersecurity experts upon detection and initiating a comprehensive forensic investigation
- Notifying relevant authorities, including the Office of the Privacy Commissioner, the National Cyber Security Centre, and the New Zealand Police.
- Taking urgent steps to secure the environment and ensure the systems were operational to minimise impact.
- Reconstructing and fortifying the systems to enhance their security and resilience.
Competenz has also been actively communicating with those affected, attempting to notify individuals whose personal information may have been compromised. The organisation has also issued the following recommendations to safeguard personal information:
- Refer to the Department of Internal Affairs’ online checklist for concerns regarding driver’s licences and passports.
- Look for any suspicious communications or phishing attempts.
- Monitor your financial and online accounts regularly for any unauthorised activities.
- Check your credit record to confirm if you have an identity or credit history that has been used fraudulently.
- Update your passwords and enable two-factor authentication wherever and whenever possible.
Individuals who believe they have been affected by the privacy breach may also reach out to Competenz by emailing cyberinfo@competenz.org.nz.