breach.co.nz is a public register of reported data breaches across New Zealand and Australia. It exists to turn scattered, hard-to-find breach reporting into a single, sourced, searchable record of what has actually happened — and to do it to a standard that stands up to scrutiny.
We are an index of public record, not an investigator. Every entry is drawn from a regulator, a court, or the affected organisation's own disclosure, and every field links back to its source. We don't make original allegations, we don't take public breach submissions, and we never host or link to breached data itself — only the fact that a breach occurred. Where we don't have an official figure, we label the gap rather than estimate it.
breach.co.nz is published by Govern, our governance and cyber-security brand. Govern helps New Zealand and Australian organisations build security and privacy practices that hold up — the same discipline this register is built on. If the breaches indexed here are the cautionary tales, Govern is the part that helps make sure you're not the next one.
Every breach record carries its own correction and right-of-reply form. If you represent an organisation named here and believe a field is inaccurate or out of date, open the record and use the "Request a correction / right of reply" form on that page — it captures the specific record, what you dispute, and a source link supporting your request.
We investigate every request against the underlying sources and then either correct the record or notify you of our decision to leave it as it stands. We don't amend or remove records on request alone — the same sourcing discipline that governs what we publish also governs what we change. Once submitted, your request is logged for review and we contact you with the outcome.
Records are labelled Confirmed (Tier A — sourced from a regulator or court) or Reported (Tier B — credible media or company disclosure, awaiting official confirmation). The Methodology page sets out the full field-by-field sourcing standard, and the Learn section explains the concepts and frameworks behind the cases.