What happened
On 1 January 2026 Stuff took its Neighbourly community network offline after user data — including names, emails, posts, private messages and GPS/location data — was offered for sale on the dark web [nb-rnz1]. Stuff filed and obtained a High Court (Auckland) injunction to stop the data spreading [nb-rnz2].
Current status
Investigating. The data-for-sale listing is attacker-sourced; the company’s response and the High Court injunction corroborate a real personal-data breach [nb-rnz1], [nb-rnz2]. No count of affected users has been published, so none is asserted here.
Why it matters
A neighbourhood network’s private messages and location data are highly personal; putting them up for sale exposes members to targeting and scams.