NZ Police

NZ Privacy Commissioner is “frustrated” to have learnt about a “serious” privacy breach through the media, relating to the email addresses of 147 firearms owners being spilled.

The police sent out an email to affected people within minutes of the serious breach occurring. But this was an avoidable serious privacy breach.

They have implemented robust systems and processes across the authority to protect the sensitive personal information they hold.

Source: https://www.stuff.co.nz/national/crime/300940572/privacy-commissioner-learnt-about-serious-breach-from-the-media

TPRM report: https://scoringcyber.rankiteo.com/company/nz-police

"id": "nzp9244823",
"linkid": "nz-police",
"type": "Data Leak",
"date": "07/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 147,
                        'industry': 'Law Enforcement',
                        'location': 'New Zealand',
                        'name': 'NZ Police',
                        'type': 'Government'}],
 'data_breach': {'number_of_records_exposed': 147,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Email addresses']},
 'description': 'A serious privacy breach occurred where the email addresses '
                'of 147 firearms owners were spilled. The police sent out an '
                'email to affected individuals within minutes of the breach '
                'occurring.',
 'impact': {'brand_reputation_impact': ['Frustration expressed by NZ Privacy '
                                        'Commissioner'],
            'data_compromised': ['Email addresses']},
 'response': {'communication_strategy': ['Sent out an email to affected '
                                         'individuals within minutes'],
              'law_enforcement_notified': True,
              'remediation_measures': ['Implemented robust systems and '
                                       'processes to protect sensitive '
                                       'personal information']},
 'title': 'Privacy Breach Involving Email Addresses of Firearms Owners',
 'type': 'Privacy Breach'}