Government

Treasury Website Leaks Government Budget Prematurely

28 May - 4 June 2019

The New Zealand Treasury website leaked the government’s annual budget ahead of its scheduled announcement

The New Zealand Treasury website leaked the government’s annual budget ahead of its scheduled announcement, prompting authorities to investigate claims of a “deliberate and systematic” hacking incident. It was later discovered that the Treasury website was misconfigured when details of the new budget, hosted in a clone instance, were indexed on the live website. The misconfiguration allowed users to obtain small amounts of the budget content by performing multiple specifically-worded searches. The New Zealand Treasury has since rectified the configurations and will be undertaking systems reviews to prevent similar incidents from occurring.


References:

Unauthorised Access to Budget Information

 
 
 
 
 
 

More Weekly Cyber Newsanalysis and insights

Ensign Consulting

Enhancing your security posture, developing your cyber strategy, and designing your incident response plans.​

Ensign Solutioning

Architecting and implementing cybersecurity solutions that bolster defences

Ensign Managed Security Services

Managing your security operations for advanced threat detection, continuous monitoring, and triage services

Ensign Labs

Performing deep research to analyse vulnerabilities, deploy advanced threat hunting and provide cyber threat intelligence