(Reuters) – The Reserve Bank of New Zealand (RBNZ) said on Friday that an investigation into the cyberattack that slowed down their data systems earlier in the week revealed that it was dealing with a big data breach.
The breach was first announced earlier in the week and RBNZ said illegal service was shared with California-based Accellion.
“The ongoing investigation makes it clear that the breach is serious and has a significant data impact,” Governor Adrian Orr said in a video statement released to the media.
“While the offense was committed by a malicious third party, believing that service arrangements have not fallen short of our agreement, the Bank has also fallen below the standards expected of our stakeholders. , ”Orr said in a accompanying written statement.
“Personally, this is a matter for me and I am ashamed and sorry,” said Orr.
Accellion has said in its media responses that it was made aware of its vulnerability in mid-December and leaked a bad within 72 hours to less than 50 customers which he influenced.
The broken system has been consolidated and shut down, and New Zealand’s financial system remains strong and open for business, RBNZ said.
In addition to the ongoing forensic cyber investigation, the bank also appointed an independent third party to review the incident.
Orr said it could not provide further details as it could adversely affect the investigation and the steps being taken to mitigate the breach.
The breach comes just months after a New Zealand stock exchange operator was targeted in a series of denial-of-service attacks that went over its website, blocking trading for several days.
Reciting with Renju Jose and Praveen Menon; Edited by Christian Schmollinger and Lincoln Feast.