Gordon Campbell | Parliament TV | Parliament Today | News Video | Crime | Employers | Housing | Immigration | Legal | Local Govt. | Maori | Welfare | Unions | Youth | Search

 

Unauthorised access to Budget information

Following Tuesday's referral, the Police have advised the Treasury that, on the available information, an unknown person or persons appear to have exploited a feature in the website search tool but that this does not appear to be unlawful. They are therefore not planning further action.

In the meantime, the Treasury and GCSB’s National Cyber Security Centre have been working on establishing the facts of this incident. While this work continues, the facts that have been established so far are:

- As part of its preparation for Budget 2019, the Treasury developed a clone of its website.

- Budget information was added to the clone website as and when each Budget document was finalised.

- On Budget Day, the Treasury intended to swap the clone website to the live website so that the Budget 2019 information was available online.

- The clone website was not publically accessible.

- As part of the search function on the website, content is indexed to make the search faster. Search results can be presented with the text in the document that surrounds the search phrase.

- The clone also copies all settings for the website including where the index resides. This led to the index on the live site also containing entries for content that was published only on the clone site.

- As a result, a specifically-worded search would be able to surface small amounts of content from the 2019/20 Estimates documents.

- A large number (approx. 2,000) of search terms were placed into the search bar looking for specific information on the 2019 Budget.



- The searches used phrases from the 2018 Budget that were followed by the "Summary" of each Vote.

- This would return a few sentences - that included the headlines for each Vote paper - but the search would not return the whole document.

- At no point were any full 2019/20 documents accessible outside of the Treasury network.

The evidence shows deliberate, systematic and persistent searching of a website that was clearly not intended to be public. Evidence was found of searches that were clearly intended to produce results that would disclose embargoed Budget information. Three IP addresses were identified that performed (in the Treasury’s estimation) approximately 2,000 searches, over a period of 48 hours, which pieced together the small amount of content available via the search tool. The IP addresses involved belonged to the Parliamentary Service, 2degrees and Vocus.

The nature of these searches ultimately led to unauthorised access to small amounts of content from the 2019/20 Estimates documents, none of which were due to be available to Parliament and the public until Budget Day.

In light of this information, Secretary to the Treasury Gabriel Makhlouf said, "I want to thank the Police for their prompt consideration of this issue. In my view, there were deliberate, exhaustive and sustained attempts to gain unauthorised access to embargoed data. Our systems were clearly susceptible to such unacceptable behaviour, in breach of the long-standing convention around Budget confidentiality, and we will undertake a review to make them more robust."

The Treasury took immediate steps on Tuesday to increase the security of all Budget-related information. Mr Makhlouf has now asked the State Services Commissioner to conduct an inquiry in order to look at the facts and recommend steps to prevent such an incident being repeated.


© Scoop Media

 
 
 
Parliament Headlines | Politics Headlines | Regional Headlines

SCOOP COVERAGE: CHRISTCHURCH MOSQUES TERROR ATTACK


"Biggest Shake-Up In 30 Years": Agency Teamups In New Public Service Act

Minister of State Services Chris Hipkins today announced the most significant changes to the New Zealand Public Service since the State Sector Act of 1988...

Under the changes, boards, made up of chief executives from relevant government agencies, will be established to tackle the most pressing issues. These boards, or joint ventures, would be accountable to a single minister and receive direct budget appropriations. Public servants from across the system will be deployed as required. More>>

 

Principals Reject Offer: Primary Teachers Vote For Settlement

Primary teachers have voted to ratify a proposed settlement that will give them pay parity with their secondary colleagues, but disappointed primary principals have rejected a settlement that was unchanged from a previously rejected offer. More>>

ALSO:

Pike River: Weeks Of Work Before Team Gets Beyond 170 Metres

No items of interest have been found in the latest forensic search of the tunnel between 30 and 170 metres, however, both the police and the Pike River Recovery Agency say it has been useful. More>>

ALSO:

Remaking Elections: Call For Four-Year Term, More MPs

A Victoria University report is proposing extending the parliamentary term to four years, and increasing the number of MPs, so politicians can plan better for the future. More>>

ALSO:

Health: Ban On Smoking In Cars With Children Passes First Reading

The Smoke-free Environments Amendment Bill would allow police to issue $50 fines for those smoking with passengers under 18 years of age. More>>

ALSO:

Fair Pay Agreements Good: CTU Releases Report On Sector Bargaining

The Council of Trade Unions has released an independent report conducted by economic research company BERL into the validity of sector bargaining. More>>

ALSO:

Goldsmith New National Finance Spokesperson: Amy Adams To Leave Politics In 2020

Amy Adams has announced she will retire from politics at the 2020 election and as a consequence of that decision she has chosen to stand down from the spokesperson roles she holds in the Party. More>>

ALSO:

Gordon Campbell: On The Government's Cosmetic Banking Reforms

The elephant in the room as the government carries out its latest bout of tinkerings with our banking practice is the extraordinary level of profit-taking still being extracted by the Australian Banking Gang from ordinary New Zealanders. Yes indeed, ... More>>

ALSO:

IPCA: Offensive Language, Misuse Of Pepper Spray

The Independent Police Conduct Authority has found that, following a pursuit in Auckland, a man was dealt with inappropriately and unprofessionally by a Police officer during his arrest. More>>

ALSO:

 
 
 
 
 

LATEST HEADLINES

  • PARLIAMENT
  • POLITICS
  • REGIONAL
 
 

InfoPages News Channels