NZ Herald
  • Home
  • Latest news
  • Herald NOW
  • Video
  • New Zealand
  • Sport
  • World
  • Business
  • Entertainment
  • Podcasts
  • Quizzes
  • Opinion
  • Lifestyle
  • Travel
  • Viva
  • Weather

Subscriptions

  • Herald Premium
  • Viva Premium
  • The Listener
  • BusinessDesk

Sections

  • Latest news
  • New Zealand
    • All New Zealand
    • Crime
    • Politics
    • Education
    • Open Justice
    • Scam Update
  • Herald NOW
  • On The Up
  • World
    • All World
    • Australia
    • Asia
    • UK
    • United States
    • Middle East
    • Europe
    • Pacific
  • Business
    • All Business
    • MarketsSharesCurrencyCommoditiesStock TakesCrypto
    • Markets with Madison
    • Media Insider
    • Business analysis
    • Personal financeKiwiSaverInterest ratesTaxInvestment
    • EconomyInflationGDPOfficial cash rateEmployment
    • Small business
    • Business reportsMood of the BoardroomProject AucklandSustainable business and financeCapital markets reportAgribusiness reportInfrastructure reportDynamic business
    • Deloitte Top 200 Awards
    • CompaniesAged CareAgribusinessAirlinesBanking and financeConstructionEnergyFreight and logisticsHealthcareManufacturingMedia and MarketingRetailTelecommunicationsTourism
  • Opinion
    • All Opinion
    • Analysis
    • Editorials
    • Business analysis
    • Premium opinion
    • Letters to the editor
  • Politics
  • Sport
    • All Sport
    • OlympicsParalympics
    • RugbySuper RugbyNPCAll BlacksBlack FernsRugby sevensSchool rugby
    • CricketBlack CapsWhite Ferns
    • Racing
    • NetballSilver Ferns
    • LeagueWarriorsNRL
    • FootballWellington PhoenixAuckland FCAll WhitesFootball FernsEnglish Premier League
    • GolfNZ Open
    • MotorsportFormula 1
    • Boxing
    • UFC
    • BasketballNBABreakersTall BlacksTall Ferns
    • Tennis
    • Cycling
    • Athletics
    • SailingAmerica's CupSailGP
    • Rowing
  • Lifestyle
    • All Lifestyle
    • Viva - Food, fashion & beauty
    • Society Insider
    • Royals
    • Sex & relationships
    • Food & drinkRecipesRecipe collectionsRestaurant reviewsRestaurant bookings
    • Health & wellbeing
    • Fashion & beauty
    • Pets & animals
    • The Selection - Shop the trendsShop fashionShop beautyShop entertainmentShop giftsShop home & living
    • Milford's Investing Place
  • Entertainment
    • All Entertainment
    • TV
    • MoviesMovie reviews
    • MusicMusic reviews
    • BooksBook reviews
    • Culture
    • ReviewsBook reviewsMovie reviewsMusic reviewsRestaurant reviews
  • Travel
    • All Travel
    • News
    • New ZealandNorthlandAucklandWellingtonCanterburyOtago / QueenstownNelson-TasmanBest NZ beaches
    • International travelAustraliaPacific IslandsEuropeUKUSAAfricaAsia
    • Rail holidays
    • Cruise holidays
    • Ski holidays
    • Luxury travel
    • Adventure travel
  • Kāhu Māori news
  • Environment
    • All Environment
    • Our Green Future
  • Talanoa Pacific news
  • Property
    • All Property
    • Property Insider
    • Interest rates tracker
    • Residential property listings
    • Commercial property listings
  • Health
  • Technology
    • All Technology
    • AI
    • Social media
  • Rural
    • All Rural
    • Dairy farming
    • Sheep & beef farming
    • Horticulture
    • Animal health
    • Rural business
    • Rural life
    • Rural technology
    • Opinion
    • Audio & podcasts
  • Weather forecasts
    • All Weather forecasts
    • Kaitaia
    • Whangārei
    • Dargaville
    • Auckland
    • Thames
    • Tauranga
    • Hamilton
    • Whakatāne
    • Rotorua
    • Tokoroa
    • Te Kuiti
    • Taumaranui
    • Taupō
    • Gisborne
    • New Plymouth
    • Napier
    • Hastings
    • Dannevirke
    • Whanganui
    • Palmerston North
    • Levin
    • Paraparaumu
    • Masterton
    • Wellington
    • Motueka
    • Nelson
    • Blenheim
    • Westport
    • Reefton
    • Kaikōura
    • Greymouth
    • Hokitika
    • Christchurch
    • Ashburton
    • Timaru
    • Wānaka
    • Oamaru
    • Queenstown
    • Dunedin
    • Gore
    • Invercargill
  • Meet the journalists
  • Promotions & competitions
  • OneRoof property listings
  • Driven car news

Puzzles & Quizzes

  • Puzzles
    • All Puzzles
    • Sudoku
    • Code Cracker
    • Crosswords
    • Cryptic crossword
    • Wordsearch
  • Quizzes
    • All Quizzes
    • Morning quiz
    • Afternoon quiz
    • Sports quiz

Regions

  • Northland
    • All Northland
    • Far North
    • Kaitaia
    • Kerikeri
    • Kaikohe
    • Bay of Islands
    • Whangarei
    • Dargaville
    • Kaipara
    • Mangawhai
  • Auckland
  • Waikato
    • All Waikato
    • Hamilton
    • Coromandel & Hauraki
    • Matamata & Piako
    • Cambridge
    • Te Awamutu
    • Tokoroa & South Waikato
    • Taupō & Tūrangi
  • Bay of Plenty
    • All Bay of Plenty
    • Katikati
    • Tauranga
    • Mount Maunganui
    • Pāpāmoa
    • Te Puke
    • Whakatāne
  • Rotorua
  • Hawke's Bay
    • All Hawke's Bay
    • Napier
    • Hastings
    • Havelock North
    • Central Hawke's Bay
    • Wairoa
  • Taranaki
    • All Taranaki
    • Stratford
    • New Plymouth
    • Hāwera
  • Manawatū - Whanganui
    • All Manawatū - Whanganui
    • Whanganui
    • Palmerston North
    • Manawatū
    • Tararua
    • Horowhenua
  • Wellington
    • All Wellington
    • Kapiti
    • Wairarapa
    • Upper Hutt
    • Lower Hutt
  • Nelson & Tasman
    • All Nelson & Tasman
    • Motueka
    • Nelson
    • Tasman
  • Marlborough
  • West Coast
  • Canterbury
    • All Canterbury
    • Kaikōura
    • Christchurch
    • Ashburton
    • Timaru
  • Otago
    • All Otago
    • Oamaru
    • Dunedin
    • Balclutha
    • Alexandra
    • Queenstown
    • Wanaka
  • Southland
    • All Southland
    • Invercargill
    • Gore
    • Stewart Island
  • Gisborne

Media

  • Video
    • All Video
    • NZ news video
    • Herald NOW
    • Business news video
    • Politics news video
    • Sport video
    • World news video
    • Lifestyle video
    • Entertainment video
    • Travel video
    • Markets with Madison
    • Kea Kids news
  • Podcasts
    • All Podcasts
    • The Front Page
    • On the Tiles
    • Ask me Anything
    • The Little Things
  • Cartoons
  • Photo galleries
  • Today's Paper - E-editions
  • Photo sales
  • Classifieds

NZME Network

  • Advertise with NZME
  • OneRoof
  • Driven Car Guide
  • BusinessDesk
  • Newstalk ZB
  • Sunlive
  • ZM
  • The Hits
  • Coast
  • Radio Hauraki
  • The Alternative Commentary Collective
  • Gold
  • Flava
  • iHeart Radio
  • Hokonui
  • Radio Wanaka
  • iHeartCountry New Zealand
  • Restaurant Hub
  • NZME Events

SubscribeSign In
Advertisement
Advertise with NZME.
Home / Business

Toll admits some customers still suffering delays on day 18 of ransomware attack

Chris Keall
By Chris Keall
Technology Editor/Senior Business Writer·NZ Herald·
17 Feb, 2020 04:46 AM6 mins to read

Subscribe to listen

Access to Herald Premium articles require a Premium subscription. Subscribe now to listen.
Already a subscriber?  Sign in here

Listening to articles is free for open-access content—explore other articles or learn more about text-to-speech.
‌
Save

    Share this article

    Reminder, this is a Premium article and requires a subscription to read.

Toll can't give an estimated time for the full restoration of its systems. Photo / File

Toll can't give an estimated time for the full restoration of its systems. Photo / File

Toll admits some of its customers are still suffering delays 18 days after it was hit by a ransomware attack. Not all systems are back online, and the company is also chewing through a backlog created by the initial chaos.

READ MORE:
• 'We're not paying up' - Toll
Group on day 7 of ransomware attack
• Security: Why your CEO could be your weakest link
• Juha Saarinen: Don't keep quiet about ransomware attacks
• Air NZ service provider Travelex held to ransom by hackers demanding $8.5m

The Melbourne based transport and logistics giant, which has substantial operations in New Zealand, has refused to even communicate with the hackers, let alone pay their (unknown) ransom.

Instead, it is grinding it out, falling back on manual systems for some operations as it slowly restores its systems. An AFR report this morning says customers including Officeworks, Unilever, Adidas and Nike have had to fend off customers angry about delays.

Toll's approach is similar to that taken by UK-based foreign exchange specialist Travelex.

Advertisement
Advertise with NZME.

Travelex went offline on January 8 after a ransomware attack saw hackers steal customer data then demand US$6 million ($8.5m) for its return.

The company went back online on January 28. It said it did not pay any ransom.

Toll, which took days to respond to the Herald's queries after its initial attack, revealed on February 7 that it had been hit by the "Mailto" ransomware attack - that is, it had not lost any customer data, but hackers had encrypted it and demanded money for it to be made readable again.

Advertisement
Advertise with NZME.
Photo / 123rf
Photo / 123rf

This morning, a Toll spokeswoman said, "We now have many of our customers back online and operating essentially as normal, including through large parts of our global cargo forwarding network and across our logistics warehouse operations around the world.

"And, we're progressively reactivating full services on the MyToll parcels booking and tracking portal. Core systems including email, phones and end-user devices have been tested, restored and are operating as normal."

Discover more

Business

Security: Why your CEO could be your weakest link

29 Jan 09:25 PM
Business

Transport company hit by cyber attack

31 Jan 02:24 AM
Business

Juha Saarinen: Don't keep quiet about ransomware attacks

04 Feb 04:00 PM
Business

Toll Group sticks to guns over ransom demand

07 Feb 04:43 AM

She added, "For all of that, we know that some of our customers continue to be affected.
"We're working with them and we're doing everything in our power to get them moving as a matter of priority and, importantly, when it's safe to do so.

"We're also turning our attention to the backlog of work that's resulted from the disruption of the past couple of weeks."

Toll can't give an estimated time for the full restoration of its systems.

On Friday January 31, Toll said it had taken a number of (un-named) systems offline as a precaution after a "suspected cyber attack".

An updated message on Monday read, "Toll Global Express New Zealand has lost use and access to its email exchange."

Today, some security experts were saying the ransomware attack could be Australasia's largest ever cyber-attack, though Dean Williams, an engineer at security specialist NortonLifeLock, cautioned that "the situation was unfolding". Although large in scale, there was not enough information at this point to call it the largest ever cyber-heist.

Advertisement
Advertise with NZME.

The Toll spokeswoman would not talk about individual customers affected, but did say the freight giant had chosen to err on the side of caution as it tried to assess the attack's impact on some 500 apps.

"Given the potential implications of a ransomware attack of this nature for a business of our scale and geographic reach, we made the considered decision early that deactivating our systems was the prudent thing to do – for our customers and for our people," she said.

"You don't arrive at such decisions lightly, particularly where it involves up to 500 applications that support operations across 25 countries. It's been a deliberately cautious approach that's been pivotal in ensuring we manage, in an orderly and methodical way, the secure reinstatement of many of our platforms."

While there is never a good time for a ransomware attack, Toll was hit just as the first wave of coronavirus disruption hit, and in the middle of a drive to modernise its older software.

The latter should help prevent further attacks.

"While there's still some work to do, we're well down the path of a three-year transformation from legacy systems to a centralised and modernised technology architecture."

What to do if you're hit by ransomware

New Zealand businesses or individuals hit by a cyber-attack are advised to contact Crown agency CERT (the Computer Emergency Response Team) as their first step.

CERT acts as a triage unit, pointing people to the right law enforcement agency or technical contacts.

CERT NZ boss Rob Pope recommends not paying a cyber-ransom. Photo / File
CERT NZ boss Rob Pope recommends not paying a cyber-ransom. Photo / File

Ransomware incidents have remained steady since 2017, making up 2 to 3 per cent of total reports receives. In the final quarter of 2019, CERT says it has received 22 ransomware reports.

NortonLifeLock's Williams did not a change in approach, however, Ransomware hackers have switched their focus from trying to extract small amounts from thousands of individuals to targeting individual corporations.

The attacks are mainly targeted at businesses through email attachments or out-of-date software vulnerabilities. Williams says to beware of "phishing" scams or where an email from a hacker closely imitates a real message from the likes of a bank (although often has a slight variation on its actual email address. Remember that your banks and other legitimate third parties will never ask you to send your password by email).

Should you pay up?

CERT director Rob Pope, like the NZ Police, recommends that people or companies hit by ransomware do not pay up.

He says there is no guarantee that data will be returned, and that funds often go to organised criminals who are also involved in hardcore offending in other areas such as drugs and human trafficking.

But when the Wannacry ransomware attack hit multiple countries in 2017, NZ lawyer Michael Wigley said those hit should consider paying up.

Data was returned in some instances, and paying up could be the pragmatic thing to do if a relatively small demand was involved, Wigley said.

He also maintained that giving in could even be the principled path.

"Sometimes paying out could even answer a legal duty. Say A has a duty to protect B's information, such as under a contract, or some other duty, and a ransom leads to a breach of that duty," he told this reporter.

Save

    Share this article

    Reminder, this is a Premium article and requires a subscription to read.

Latest from Business

Business|companies

Entrepreneur Bowen Pan on why he returned to NZ

Premium
Business|companies

Silicon Valley to NZ: Kiwi Facebook Marketplace inventor is back home to give back

05 Jul 12:00 AM
Premium
Opinion

Bruce Cotterill: Is our bloated bureaucracy hindering economic growth?

04 Jul 11:00 PM

Audi offers a sporty spin on city driving with the A3 Sportback and S3 Sportback

sponsored
Advertisement
Advertise with NZME.

Latest from Business

Entrepreneur Bowen Pan on why he returned to NZ

Entrepreneur Bowen Pan on why he returned to NZ

The Kiwi founder of Facebook Marketplace and new NZME director on returning home and new projects. Video / Cameron Pitney

Premium
Silicon Valley to NZ: Kiwi Facebook Marketplace inventor is back home to give back

Silicon Valley to NZ: Kiwi Facebook Marketplace inventor is back home to give back

05 Jul 12:00 AM
Premium
Bruce Cotterill: Is our bloated bureaucracy hindering economic growth?

Bruce Cotterill: Is our bloated bureaucracy hindering economic growth?

04 Jul 11:00 PM
Premium
Fran O’Sullivan: ESG is being redefined as Europe ramps up defence investment

Fran O’Sullivan: ESG is being redefined as Europe ramps up defence investment

04 Jul 09:00 PM
Gold demand soars amid global turmoil
sponsored

Gold demand soars amid global turmoil

NZ Herald
  • About NZ Herald
  • Meet the journalists
  • Newsletters
  • Classifieds
  • Help & support
  • Contact us
  • House rules
  • Privacy Policy
  • Terms of use
  • Competition terms & conditions
  • Our use of AI
Subscriber Services
  • NZ Herald e-editions
  • Daily puzzles & quizzes
  • Manage your digital subscription
  • Manage your print subscription
  • Subscribe to the NZ Herald newspaper
  • Subscribe to Herald Premium
  • Gift a subscription
  • Subscriber FAQs
  • Subscription terms & conditions
  • Promotions and subscriber benefits
NZME Network
  • The New Zealand Herald
  • The Northland Age
  • The Northern Advocate
  • Waikato Herald
  • Bay of Plenty Times
  • Rotorua Daily Post
  • Hawke's Bay Today
  • Whanganui Chronicle
  • Viva
  • NZ Listener
  • Newstalk ZB
  • BusinessDesk
  • OneRoof
  • Driven Car Guide
  • iHeart Radio
  • Restaurant Hub
NZME
  • About NZME
  • NZME careers
  • Advertise with NZME
  • Digital self-service advertising
  • Book your classified ad
  • Photo sales
  • NZME Events
  • © Copyright 2025 NZME Publishing Limited
TOP