🔒breach.co.nz · the NZ & Australia breach register 🛡️ A Govern service
By sector › Finance

💳 Finance — data breaches

9 records in the finance sector across New Zealand and Australia.

🖨 Printable Finance briefing
Finance sector · leaderboard
Own the Finance leaderboard
The top banner across the Finance overview and every Finance record — one advertiser, exclusively.
Own this leaderboard → breach@govern.co.nz
Thankyou Payroll — Metabase-linked incident
🇳🇿 New Zealand · breach 2026-08
● Disclosed
People affected
Not disclosed
Data taken
IRD (tax file) numbers, Home addresses, Bank account details
Regulator
NZ Privacy Commissioner (notified)
Trust tier
Reported
Source: RNZ · View record →
youX
🇦🇺 Australia · breach 2026-02
● Disclosed
People affected
Not disclosed
Data taken
youX confirmed only that personal information was accessed and downloaded. The attacker claimed the data includes home addresses, income and debt details, government IDs (including about 5,010 driver-licence numbers in a preview), broker-customer SMS, vehicle identifiers, 8,075 employee password hashes and financial-hardship notes (unverified threat-actor claims)
Regulator
OAIC and National Office of Cyber Security (reviews closed per youX, Apr 2026)
Trust tier
Reported
Source: Information Age (ACS) · View record →
Sponsored placement
Reach decision-makers, in-feed
Native placement alongside the breaches your buyers are already reading.
Enquire → breach@govern.co.nz
Australian superannuation funds (coordinated attack)
🇦🇺 Australia · breach 2025-03
● Disclosed
People affected
Not disclosed
Data taken
Member account access via credential stuffing. Per-fund figures as reported: Rest said about 8,000 members may have had personal information accessed (~20,000 accounts affected); AustralianSuper said up to 600 members' passwords were used; Insignia ~100 accounts; ART 'several hundreds', Funds withdrawn: SBS News reported it understands four AustralianSuper members lost a combined ~A$500,000 (not confirmed by the fund)
Regulator
ASIC / APRA (engaged)
Trust tier
Reported
Source: SBS News · View record →
Finsure
🇦🇺 Sydney, NSW · breach 2024-10
● Disclosed
People affected
Not disclosed
Data taken
Names, email addresses, phone numbers and physical addresses (marketing data held on a third-party platform)
Regulator
None reported
Trust tier
Reported
Source: The Adviser · View record →
Squirrel
🇳🇿 New Zealand · breach 2024-07
● Disclosed
People affected
600 (approx)
Data taken
Name, date of birth, and passport or driver-licence ID numbers (held by a third-party ID-verification onboarding system); Squirrel said photos of IDs, usernames, passwords and bank account details were not compromised
Regulator
NZ Privacy Commissioner (notified)
Trust tier
Reported
Source: RNZ · View record →
Firstmac
🇦🇺 Brisbane, QLD · breach 2024-04
● Disclosed
People affected
Not disclosed
Data taken
Name, date of birth, address, email and phone number, External bank account details (BSB and account number) and driver licence number
Regulator
Not specified (relevant authorities engaged)
Trust tier
Reported
Source: Bitdefender · View record →
Latitude Financial
🇦🇺 Melbourne, VIC (AU + NZ operations) · breach 2023-03
● Under investigation
People affected
Not disclosed
Data taken
Driver licence numbers (~7.9M across AU & NZ), Passport numbers (~53,000), Financial statements of fewer than 100 customers
Regulator
OAIC + NZ Privacy Commissioner (joint)
Trust tier
Confirmed
Source: OAIC · View record →
P&N Bank
🇦🇺 Perth, WA · breach 2019-12
● Disclosed
People affected
100,000 (approx)
Data taken
Names, addresses, email addresses, age, customer and account numbers, and account balances; the bank said its core banking system (passwords, card details) was isolated from the affected CRM, and that the CRM did not hold driver licence, passport or tax file numbers, or dates of birth
Regulator
WA Police / federal authorities
Trust tier
Reported
Source: BleepingComputer · View record →
LandMark White
🇦🇺 Sydney, NSW · breach 2019-01
● Before the courts
People affected
Not disclosed
Data taken
Property-valuation records containing borrowers' and owners' personal contact details; about 137,500 valuation records exposed and later leaked on a dark-web forum
Regulator
None reported (criminal charges by NSW Police)
Trust tier
Reported
Source: iTnews · View record →
GGOVERN Tabletop Exercises · Govern house Rehearse the breach before it reaches the balance sheet. Book a Discovery Call →