Identity and financial details leaked in Lower Hutt council cyber attack

A March cyber attack on the Hutt City Council has exposed the identity and financial information of hundreds of people to hackers. Photo / Monique Ford

A March cyber attack on the Hutt City Council has exposed the identity and financial information of hundreds of people to hackers.

The council has confirmed the phishing attack compromised the identity information of five people, and 732 people might have had financial information compromised through email correspondence.

They called the incident “deeply regrettable”, adding all those affected had been contacted and notified of the steps to be taken in response.

“We unreservedly apologise to anyone affected by this attack. Any exposure of personal information is not acceptable,” the council said.

“As criminals use AI to carry out more frequent and sophisticated attacks, they can automate scams, avoid detection, and adapt to security measures. This makes strong monitoring, quick response, and clear reporting essential to protect our systems.”

Chief executive Jo Miller said on Wednesday the council had reported the incident to the Office of the Privacy Commissioner.

“We are sorry this has occurred and acknowledge the concern it may have caused. It’s a reminder to us of the need to handle data with sufficient care.

“We want to reassure the community that additional safeguards have been put in place and system security strengthened.

“We have brought forward our work programme that includes further mitigations to protect council information and prevent any further attack of this nature.”

Local Democracy Reporting (LDR) is local body journalism co-funded by RNZ and NZ On Air.

Sign up to The Daily H, a free newsletter curated by our editors and delivered straight to your inbox every weekday.