Your ad hereSponsor the Technology briefing — the header banner on every printed and downloaded copy.
breach@govern.co.nz🔒 breach.co.nzThe NZ & Australia breach register · a Govern service
Printed 7 November 2026
breach.co.nz/sector/technology/print/
breach.co.nz/sector/technology/print/
🖥️ Technology: reported data breaches
Every technology breach in the breach.co.nz register, New Zealand and Australia, 2018–2025. Each line is a public record; follow the short link to see the sources.
6records
0+people affected (disclosed, 0 of 6)
2 · 4NZ · AU
1confirmed by regulator / court
0penalties or court action
Suppliers named in these records: Outabox (1) · ZircoDATA (1) · Mercury IT (1) · PageUp (1). A supplier appearing here is not a finding against that supplier — see each record.
All 6 records
| Organisation | Breach | People | Data reported | Status | Tier |
|---|---|---|---|---|---|
| 🇳🇿 Neighbourlybreach.co.nz/breach/nz-2025-neighbourly | 2025-12 | Not disclosed | Names, email addresses, GPS coordinates, some phone numbers, public forum posts and direct member messages; login details reportedly not included | Disclosed | B · Reported |
| 🇦🇺 Outabox (NSW clubs & pubs)breach.co.nz/breach/au-2024-outabox-clubsnsw | 2024-05 | Not disclosed | Facial-recognition biometrics and driver licence scans; Signatures, home addresses and dates of birth | Under investigation | B · Reported |
| 🇦🇺 ZircoDATAbreach.co.nz/breach/au-2024-zircodata | 2024-02 | Not disclosed | Home Affairs Free Translating Service client data: full names, dates of birth, mobile and email; visa, driver-licence and passport data; Archived Monash Health records from its family-violence and sexual-assault support units, 1970–1993 | Disclosed | B · Reported |
| 🇳🇿 Mercury ITbreach.co.nz/breach/nz-2022-mercury-it | 2022-11 | Not disclosed | Ministry of Justice: ~14,500 coronial files on the transport of deceased people; Te Whatu Ora: ~8,500 Middlemore bereavement records, ~5,500 cardiac/inherited-disease registry records, and records of six health regulatory boards | Under investigation | A · Confirmed |
| 🇦🇺 Canvabreach.co.nz/breach/au-2019-canva | 2019-05 | Not disclosed | Usernames, names, email addresses and city/country; bcrypt-hashed passwords for a subset of users | Disclosed | B · Reported |
| 🇦🇺 PageUpbreach.co.nz/breach/au-2018-pageup | 2018-05 | Not disclosed | Job-applicant personal details and reference contact information, and PageUp employee usernames/passwords | Disclosed | B · Reported |
Reading this briefing
Tier A — Confirmed: a regulator or court has acted or published. Tier B — Reported: the organisation’s own disclosure or credible media, awaiting official confirmation. “People affected” is what the organisation or regulator disclosed; “Not disclosed” means no official figure exists, and we don’t estimate. Totals add disclosed figures only and may overlap.
breach.co.nz is an index of public record, not an investigator. Every record is drawn from regulator releases, court material or the organisation’s own disclosure, and links to its source online. Figures reflect what those sources reported; matters before the courts are allegations not yet determined. Check the live record for the latest — this print-out is a snapshot. Corrections: breach@govern.co.nz.