Gordon Campbell | Parliament TV | Parliament Today | Video | Questions Of the Day | Search


NZTA’s lost USB drive massive security breach

4 January 2018

NZTA’s lost USB drive massive security breach

A lost computer drive by the New Zealand Transport Agency (NZTA) between Wellington and Auckland earlier this month was potentially far more damaging than the ‘little risk of personal identity theft’ described by NZTA at the time, National’s Data and Cybersecurity spokesperson Dr Shane Reti says.

“National has received documents which show the huge extent of the breach, cynically released by the Government just before the Christmas holidays.

“We now know the lost USB drive contained information for staff identity cards for 1104 individuals including names, email addresses, photos and signatures.

“This constitutes a significant data privacy breach that cannot be swept under the table as ‘little risk of personal identity theft’.

“It is hard to believe and completely unacceptable that NZTA would courier staff identity data without password protection and without encryption.

“NZTA needs to immediately offer all 1104 staff identity theft protection to monitor and protect them if the stolen credentials are used. Email addresses may need to be changed and because photographs were included passport monitoring may also be required.

“NZTA needs an independent body such as CertNZ or the Privacy Commissioner to urgently review their cybersecurity policies and reassure the public with a report on findings and actions.

“The loss of the data drive is consistent with the cybersecurity laziness this Government has shown as Russian cyberattacks on DHBs, lack of 2-factor-authentication at the Ministry of Health, and now the loss of a data drive with no passwords and no encryption.

“Transport Minister Phil Twyford is responsible for the NZTA and his lack of transparency over this data loss is another example of NZTA failing under his watch.”

Attachment: Answers to Parliamentary Written Questions

© Scoop Media

Parliament Headlines | Politics Headlines | Regional Headlines

Welfare Stats: Rise In Hardship Numbers Shows Income Inadequacy

The latest Ministry of Social Development quarterly report show that a record number of people have received hardship assistance from work and income, with an additional 40,000 hardship payments made between September and December 2018, compared to the previous quarter of the same year...

Auckland Action Against Poverty is calling on the Government to increase baseline benefits to stop record numbers of people requiring hardship assistance to meet the basic costs of living. More>>


DHBs "Prepared": Junior Doctors Strike Tuesday, Wednesday

The needs of acute patients will be met during tomorrow's junior doctor strike, a DHB spokesperson says... Almost 3000 junior doctors are expected to walk off the job, which will affect all DHBs apart from West Coast District Health Board. More>>


Gordon Campbell: On MBIE’s Social Media Scam

Given the ambit of MBIE’s work, almost any form of social activity could qualify as being part of MBIE’s brief, so the privacy threats posed by this training programme are extensive. The current oversight safeguards seem threadbare to non-existent. More>>


JusTrade: New Campaign For A 21th Century Trade Agenda

‘Critique is no longer enough. If anything is to really change, we need to step away from the existing framework and take a first-principles approach to rethinking what will work for the 21st century.’ More>>


Gordon Campbell: Thompson + Clark Are The Tip Of The Iceberg

How can we tell where and how any lines are being drawn? Oversight is not exactly robust. If it were, Thompson + Clark would have been out of contention for state security work ten years ago. More>>

Trainers: Taratahi Institute of Agriculture In Interim Liquidation

Taratahi employ 250 staff and this year has provided education to over 2500 students. Taratahi owns and manages 8 farms throughout the country. More>>


IPCA Report: Complaints About Deputy Commissioner Wallace Haumaha

The Authority has found that DC Haumaha acted improperly by approaching staff and others to provide information to support him to refute the allegations about his 2016 conduct, or solicited other staff to do so on his behalf... More>>





InfoPages News Channels