Competenz Cyber Response

Information, updates and support for those affected

What happened?

Competenz was subject to a cyber-attack in June 2024 that resulted in personal data and identity documents being compromised in the attack.

What has Competenz done?

Competenz took immediate steps to address the attack:

  • Independent cybersecurity experts were engaged upon detection, and a comprehensive forensic investigation was initiated
  • Relevant authorities were notified, including the Office of the Privacy Commissioner and the National Cyber Security Centre. The New Zealand Police were also made aware of the incident
  • Urgent steps were taken to secure the environment, and systems were restored as quickly as possible to minimise impact
  • Systems were reconstructed and fortified to enhance security and resilience
  • Updates about the attack were issued to customers and stakeholders, keeping them informed of the investigations
  • Notifications were sent to impacted parties.

Current situation

More than 12 months after the cyber incident, Competenz has no active incident response in place. We will continue to strengthen internal security measures and maintain a vigilant approach to safeguarding systems and data. This page will be updated with information during an incident impacting our community.

What should you do?

We recommend the following steps to safeguard your information:

  • Use the DIA Checklist: Refer to the Department of Internal Affairs’ online checklist for steps to take in relation to driver licences and passports: Identity Theft Online Checklist.
  • Stay alert: Watch for any suspicious communications or phishing attempts.
  • Monitor accounts: Regularly check your financial and online accounts for unauthorized activities.
  • Check your credit record: Check your credit record to confirm if your identity has been used to obtain credit without your knowledge. Please refer to here for further information.
  • Update security: Change passwords and enable two-factor authentication where possible.

You may also seek advice from the Office of the Privacy Commissioner for additional support.