What happened
Zenith Technology Corporation Limited (ZenTech), a Dunedin-based Contract Research Organisation involved in clinical trials for the health sector, suffered a ransomware attack estimated around August 18, 2026. [zawoo-claim] The ZaWoo ransomware group publicly claimed responsibility on August 31, 2026, demanding a ransom and threatening to release sensitive data within 7 days. [zawoo-claim] Health New Zealand Te Whatu Ora confirmed the incident on September 10, 2026, stating that clinical trial files attributed to ZenTech had been identified online. [health-nz-statement]
Data exposed
Clinical trial documentation and files containing sensitive health information related to participants and trials conducted by ZenTech. [health-nz-statement] The exact number of affected individuals and comprehensive data inventory remain unknown as of September 10, 2026; Health NZ and ZenTech have not yet released detailed figures. [health-nz-statement] The threat actor (ZaWoo) claims to hold sensitive data, but independent verification is pending official disclosure.
Timeline
- 2026-08-18 — Estimated breach date (per ZaWoo claim). [zawoo-claim]
- 2026-08-31 — ZaWoo ransomware group publicly claims responsibility and posts warning on ransomware leak site, demanding negotiation within 7 days. [zawoo-claim]
- 2026-09-10 — Health NZ confirms incident; clinical trial files identified online; Police investigation confirmed; Health Minister Simeon Brown briefed and receiving regular updates. [health-nz-statement] [odt-article] [rnz-article]
Regulatory outcome
Active police investigation. Health New Zealand providing support to ZenTech response. Health Minister receiving regular updates. The Privacy Commissioner of New Zealand has not yet announced a formal investigation as of September 10, 2026. Ransom demand remains unresolved and public negotiations status unknown.
Why it matters
ZenTech is a critical infrastructure provider for clinical trials in New Zealand, supporting Health New Zealand and the wider health sector. A compromise affecting trial documentation poses risks to ongoing research integrity, participant privacy, and the continuity of clinical trial programmes. The incident demonstrates the evolving threat landscape targeting healthcare research organisations and the coordination required between government agencies, health authorities, and law enforcement in response.
Status note: This record is published on the day of public disclosure. Figures for affected individuals remain pending official confirmation. Updates will be made as ZenTech, Health NZ, or regulatory authorities release verified information. Right of reply available upon contact.