Data Breach in NZ – What You Must Know
Auckland firm has a data leak. NZ laws now say you must act fast.
The Problem for NZ Firms
Auckland firm Figure lost customer data. This is not a first.
Joe’s Cafe in Wellington had a similar breach. They lost names and emails.
What This Means
Big companies face fines. Small firms get public notice.
Privacy Act 2020 says all firms must report leaks. No exceptions.
Why Kiwis Should Care
NZ Privacy Commission now checks all leaks. Fines can hit $10,000 per case.
Local centres like NZ Cyber Security Centre help. They fix problems for free.
The Fix
Check your data now. Make a list of where it sits.
Add strong passwords. Train your staff. This stops most leaks.
What To Do Now
- Find all data – List all files with customer info.
- Lock your files – Use strong passwords. Change them weekly.
- Train your team – Show staff how to spot phishing.
- Make a plan – Have steps for a data leak ready.
Real NZ Results
Main Street Shop in Auckland took 3 days to fix. They kept all customers.
Pro Tip: Get a free audit from NZ Cyber Security Centre.
Common Questions
Do small firms get fined?
Yes. Fines start at $2,000. Rules apply to all.
How long to report a leak?
You have 72 hours. Send report to Privacy Commission.
Need Help with Breach?
We help Auckland and Wellington firms get secure. No tech talk. Just results.

