Ransomware Attack Update

This is an update on our previous communication to you on 6 December 2022 that outlined the ransomware attack on our IT provider that locked down our files, and exposed them to the ransomware attackers.

Since then, there has been media coverage of the effects on some larger, high profile affected companies like Accuro Health, BusinessNZ, the NZ National Nurses Association and the Ministry of Justice.

We have obtained advice from external forensics and privacy experts on the information posted on an associated data leak website. This advice has concluded that there is no evidence client information or records were leaked or exposed by the attack.

Further steps have been taken internally and with the provision of IT services, to enhance the security over this data, including completion of migration of data to the more secure provider.

While on-going security enhancements in different areas continue, we are pleased to advise that this ransomware attack can be concluded without exposure to your records. We will of course let you know if we hear of anything that alters this view.

If you have any questions, please don't hesitate to contact us.