“The nature and extent of information that has been potentially accessed is still being determined, but it may include some commercially and personally sensitive information.”
Orr said the system had been “secured” and taken offline until the bank had completed its initial investigations.
“It will take time to understand the full implications of this breach, and we are working with system users whose information may have been accessed. Our core functions remain sound and operational,” he said.
A government spokesman said Prime Minister Jacinda Ardern, Finance Minister Grant Robertson and GCSB Minister Andrew Little had been notified of the breach, but said ministers were leaving comment to the Reserve Bank.
A Reserve Bank spokesman said the central bank was not currently making further comment, but expected to provide more information at some point.
The bank would not comment on whether there was any financial risk to the bank, what system had been compromised, or when the bank had become aware of the breach.
Nor would it say whether it believed it had been specifically targeted.
The nature of attack – for example whether it is a ransomware attack or some other compromise – also remains unclear.
Stuff
