Treasury Website Leaks Government Budget Prematurely
The New Zealand Treasury website leaked the government’s annual budget ahead of its scheduled announcement, prompting authorities to investigate claims of a “deliberate and systematic” hacking incident. It was later discovered that the Treasury website was misconfigured when details of the new budget, hosted in a clone instance, were indexed on the live website. The misconfiguration allowed users to obtain small amounts of the budget content by performing multiple specifically-worded searches. The New Zealand Treasury has since rectified the configurations and will be undertaking systems reviews to prevent similar incidents from occurring.
More Weekly Cyber Newsanalysis and insights
Enhancing your security posture, developing your cyber strategy, and designing your incident response plans.
Architecting and implementing cybersecurity solutions that bolster defences
Ensign Managed Security Services
Managing your security operations for advanced threat detection, continuous monitoring, and triage services