Select Page

NZ Incident: SAP apologises after NZ firearms registry upgrade privacy breach | iTnews

Posted by | Dec 3, 2019 | , , , | 0 |

NZ Incident: SAP apologises after NZ firearms registry upgrade privacy breach | iTnews

NZ Privacy Breach 3 December 2019. SAP apologises after NZ firearms registry upgrade privacy breach.

Gun buyback site shut down.

Organisation Statement: Privacy breach of online notification platform for firearm buy-back programme
Source: SAP apologises after NZ firearms registry upgrade privacy breach

A systems update by SAP for the cloud platform used by the New Zealand police as part of its government-mandated gun buyback of semi-automatic rifles caused a privacy breach, leading to the entire online system being shut down.

Deputy commissioner Mike Clement said the problem was reported to NZ police by an arms dealer with legitimate access to the firearm buyback site, who was able to view details of gun owners.

Clement said that the system update was not authorised by the police, and lead to arms dealers having a higher level of access to notifications in the registry database than they should have had.

Police said only one dealer logged in after the update, making the breach an isolated incident. The personal details of gun owners, particularly location based data, is regarded as acutely sensitive.

Rate:

About The Author

Steven Kirby

I provide independent and practical consultancy services through raising awareness and fostering the energy for change that delivers improved business management of information security governance, risk and compliance.

Related Posts

NZ Incident: Data breach after lax New Zealand Transport Agency (NZTA) security | Stuff.co.nz

NZ Incident: Data breach after lax New Zealand Transport Agency (NZTA) security | Stuff.co.nz

September 9, 2019

Health open data bungle meant Aussies could be identified | iTnews

Health open data bungle meant Aussies could be identified | iTnews

December 21, 2017

Incident: Health worker sacked over ‘serious breach’ of patients’ privacy as ACT government investigates data misuse | ABC News (Australia)

Incident: Health worker sacked over ‘serious breach’ of patients’ privacy as ACT government investigates data misuse | ABC News (Australia)

March 22, 2023

Incident: Australian strata company SSKB breached | iTnews

Incident: Australian strata company SSKB breached | iTnews

October 28, 2022

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Please follow the Source link to the original article to support the content owner. We only provide a brief summary with metadata to assist in categorisation.

More Australian News

New statistics have revealed that 2025 saw the highest number of data breach notifications being reported to the OAIC since the mandatory breach reporting scheme commenced in 2018. The OAIC received… | Office of the Australian Information Commissioner
New statistics have revealed that 2025 saw the highest number of data breach notifications being reported to the OAIC since the mandatory breach reporting scheme commenced in 2018. The OAIC received… | Office of the Australian Information Commissioner

New statistics have revealed that 2025 saw the highest number of data breach notifications being reported to the OAIC since the mandatory breach … [...]

How a notification wiped a business from social media | A Current Affair
How a notification wiped a business from social media | A Current Affair

Like most small businesses, Rebecca relies on social media for her brand. She spent years building her skincare line, even paying for ads on the platforms. But within seconds- it [...]

Key Trends in Cyber Security and Data Privacy (2026): a General Counsel lens
Key Trends in Cyber Security and Data Privacy (2026): a General Counsel lens

Cyber security and data privacy are now core governance tests - demanding clear decision-making authority, disciplined escalation and evidence … [...]

Australia’s New ADM Transparency Obligation: OAIC Signals a Broad Reading Ahead of December 2026
Australia’s New ADM Transparency Obligation: OAIC Signals a Broad Reading Ahead of December 2026

On 18 May 2026, the Office of the Australian Information Commissioner (OAIC) released its Issues Paper on the new automated decision-making (ADM) … [...]

Tiny Pixels, Bigger Problems: What the OAIC's Tracking Pixel Determinations Mean for Your Business

Tracking pixels are one of many tracking tools that are often used by businesses to gain insights and target advertising effort across the internet … [...]

Why legacy systems should be on every legal team’s risk register

Legacy systems may be out of sight, but they're rarely risk-free. From forgotten databases to unsupported software, ageing technology gives attackers … [...]

Unfolding in real time: Artificial intelligence is reshaping cybersecurity
Unfolding in real time: Artificial intelligence is reshaping cybersecurity

Key takeaways The cybersecurity capability of next-generation frontier artificial intelligence (AI) models is increasing rapidly. Large language … [...]

NSW Government Bulletin: Managing employee social media content in the public sector
NSW Government Bulletin: Managing employee social media content in the public sector

Over recent years, the increase in social media activity across different platforms has facilitated opportunities for employees to comment on a broad … [...]

Australia: Pixel Perfect – The regulator addresses use of tracking pixels
Australia: Pixel Perfect – The regulator addresses use of tracking pixels

On 11 June 2026, the Office of the Australian Information Commissioner (OAIC) published two determinations against Medmate Australia Pty Ltd (Medmate) … [...]

The Disappearing Evidence Trap: Forensically Capturing Chat and Encrypted Apps

Discover how modern corporate investigations are shifting from email to chat and encrypted apps. Learn essential strategies for defensible forensic… [...]

Australian Cyber Aware - As It Was 2606 - June 2026
Australian Cyber Aware - As It Was 2606 - June 2026

This monthly review provides a curated summary of Australian and New Zealand cyber, privacy, and information security developments identified during … [...]

Key Trends in Cyber Security and Data Privacy (2026): a General Counsel lens - Governance Institute of Australia
Key Trends in Cyber Security and Data Privacy (2026): a General Counsel lens - Governance Institute of Australia

Cyber security and data privacy are now core governance tests – demanding clear decision-making authority, disciplined escalation and evidence that … [...]

Shares
Share This

Discover more from Australian Cyber Aware

Subscribe now to keep reading and get access to the full archive.

Continue reading