Blog

ZenTech cyber breach sparks police investigation

Health NZ is supporting Dunedin-based clinical research organisation Zenith Technology (ZenTech) following a cyber security incident that has seen company data published online.

ZenTech said it had taken certain systems offline as a precaution while it worked to secure its IT environment and contain the incident.

The company has engaged independent cyber security experts to investigate and assess the nature and extent of any impact.

“We are aware that some sample material purported to be company data has been published online,” ZenTech said.

“We are working closely with relevant authorities and government agencies, including Health New Zealand.”

Health NZ said it became aware of the incident after files attributed to ZenTech were identified online.

It said there had been no impact on Health NZ digital systems, with hospitals and primary care providers operating as normal.

ZenTech is a privately owned Dunedin-based contract research organisation involved in clinical trial-related work with Health NZ and the wider health sector.

Health NZ said specialist experts and relevant agencies were involved in the response, which was being managed through established national incident response protocols.

Health NZ noted the incident is also subject to an ongoing Police investigation, adding that the investigation and forensic work limited what could currently be made public.

“Where any information is confirmed that indicates risk to individuals, Health New Zealand will work with the impacted organisation and relevant agencies to ensure appropriate steps are taken to notify and support those affected,” it said.

ZenTech said its investigation was continuing and it was assessing available information before providing further details.