Hutt City Council Phishing Attack Exposes Personal and Financial Data of Hundreds
In March, the Hutt City Council in New Zealand’s North Island fell victim to a phishing attack that compromised sensitive data. The breach exposed the identity details of five individuals and the financial information of up to 732 people.
The council issued a public apology, acknowledging the incident and the distress caused to those affected. All impacted individuals have since been notified and advised on necessary steps to mitigate risks. While the council did not disclose the perpetrators, it confirmed that no group has claimed responsibility for the attack.
In response, the council has strengthened its cybersecurity measures, including enhanced monitoring, updated security protocols, and additional staff training. Officials emphasized the growing threat of AI-driven cyberattacks, which enable criminals to automate scams, evade detection, and adapt to defenses more efficiently.
The incident underscores the need for robust security practices as cyber threats continue to evolve. The council has reaffirmed its commitment to safeguarding personal data and preventing future breaches.
Hutt City Council cybersecurity rating report: https://www.rankiteo.com/company/hutt-city-council
"id": "HUT1777501436",
"linkid": "hutt-city-council",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '737',
'industry': 'Public Sector',
'location': 'New Zealand, North Island',
'name': 'Hutt City Council',
'type': 'Government'}],
'attack_vector': 'Phishing',
'customer_advisories': 'Advised on necessary steps to mitigate risks',
'data_breach': {'number_of_records_exposed': '737',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Identity details',
'Financial information']},
'date_detected': '2024-03',
'description': 'In March, the Hutt City Council in New Zealand’s North Island '
'fell victim to a phishing attack that compromised sensitive '
'data. The breach exposed the identity details of five '
'individuals and the financial information of up to 732 '
'people.',
'impact': {'brand_reputation_impact': 'Distress caused to affected '
'individuals',
'data_compromised': 'Personal and financial data',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'lessons_learned': 'Growing threat of AI-driven cyberattacks enabling '
'automation of scams, evasion of detection, and adaptation '
'to defenses.',
'post_incident_analysis': {'corrective_actions': 'Enhanced monitoring, '
'updated security protocols, '
'additional staff training'},
'recommendations': 'Strengthen cybersecurity measures, including robust '
'security practices to prevent future breaches.',
'references': [{'source': 'Incident description'}],
'response': {'communication_strategy': 'Public apology and notifications to '
'affected individuals',
'enhanced_monitoring': 'Yes',
'remediation_measures': 'Enhanced monitoring, updated security '
'protocols, additional staff training'},
'title': 'Hutt City Council Phishing Attack Exposes Personal and Financial '
'Data',
'type': 'Phishing Attack'}