Ministry of Justice - New Zealand

The New Zealand Ministry of Justice suffered a data breach hack that affected thousands of coronial files and post-mortem reports.

The hackers did not target the ministry directly but an external company that provides IT services to the ministry was targeted.

the incident affected the access to approximately 14,500 coronial files relating to the transportation of deceased people, and approximately 4000 post-mortem reports.

The ministry immediately started the investigation and even notified the families that were affected in the incident.

Source: https://www.newshub.co.nz/home/new-zealand/2022/12/thousands-of-coronial-files-post-mortem-reports-caught-up-in-ministry-of-justice-hack.html

TPRM report: https://scoringcyber.rankiteo.com/company/new-zealand-ministry-of-justice

"id": "min202281222",
"linkid": "new-zealand-ministry-of-justice",
"type": "Breach",
"date": "12/2022",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"

{'affected_entities': [{'industry': 'Government',
                        'location': 'New Zealand',
                        'name': 'New Zealand Ministry of Justice',
                        'type': 'Government Agency'}],
 'attack_vector': 'Third-Party Breach',
 'data_breach': {'number_of_records_exposed': ['14,500', '4000'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['coronial files',
                                              'post-mortem reports']},
 'description': 'The New Zealand Ministry of Justice suffered a data breach '
                'hack that affected thousands of coronial files and '
                'post-mortem reports.',
 'impact': {'data_compromised': ['14,500 coronial files',
                                 '4000 post-mortem reports']},
 'initial_access_broker': {'entry_point': 'Third-Party Vendor'},
 'response': {'communication_strategy': 'Notified affected families'},
 'title': 'New Zealand Ministry of Justice Data Breach',
 'type': 'Data Breach'}