HighSecurity incidentupdated 28 Oct 2026, 12:09 UTC
New Zealand coronial system delayed by ransomware attack
A cyber attack (ransomware, where criminals lock files until paid) has slowed down official death investigations in New Zealand. Families are waiting months for answers.
1 source, unconfirmed
| Severity | HighSecurity incident |
|---|---|
| Being exploited? | UnclearNo reports either way yet |
| What to do | Check exposureContact the coroner's office directly to ask for a current status and expected timeline for your case. |
| How sure is this? | 1 source, unconfirmedOnly one publisher so far, details may change |
What happened
A major cyber attack, reported as ransomware, has disrupted New Zealand's coronial investigation processes and caused delays to inquests into deaths.
Why it is dangerous: Grieving families face long waits for answers about how their relatives died, and the delays may affect people involved in coronial cases across New Zealand.
Are you affected?
You are affected if you are a family member or party waiting on a coronial investigation or inquest in New Zealand.
What to do
- Contact the coroner's office for an updated timeline on your case
- Keep records of communication about delays for support or complaint purposes
- Check official New Zealand government and Coroners Court updates for recovery progress
Timeline
- 28 Oct 2026, 11:58 UTCPublicly disclosed
- 28 Oct 2026, 11:58 UTCReported by DataBreaches.net · DataBreaches.net
- 28 Oct 2026, 12:09 UTCPicked up by Zero Radar
Sources 1 report, oldest first
Security press established security newsrooms
- NZ: Grieving families’ ‘incredibly stressful’ wait for answers after major NZ cyber attackDataBreaches.net · 28 Oct 2026, 11:58 UTC
Technical details
- ID
- ZR-88eed8fd
- Disclosed
- 28 Oct 2026, 11:58 UTC
- On Zero Radar
- 28 Oct 2026, 12:09 UTC (11 min after disclosure)
- Last change
- 28 Oct 2026, 12:09 UTC
The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works