Compass Communications ransomware intrusion in Auckland, RA World claims 250 GB with unverified customer impact
In December 2024, Compass Communications, an Auckland telecommunications provider, detected unauthorised access to its systems, engaged outside security specialists and notified New Zealand's Privacy Commissioner. The ransomware group RA World claims it stole 250 GB of data and posted a 26.9 MB sample that, according to a Cyber Daily report cited by the article, contains service agreements, financial statements and customer banking details. Compass confirmed the intrusion and said its initial investigation suggested some customer information may have been accessed, promising direct contact where it finds impact, but it has published no customer count or verified data volume. The archive's size says little about how many people or accounts are affected, or whether the records belong to current or former customers. The article sets this case beside Spark New Zealand's annual breach figures, which are company-wide and give no customer totals for FY25 and FY26. Criticity is high because the intrusion is confirmed and banking data may be exposed, while the scope remains unverified, no CVE or initial access vector is reported, and this record rests on the article alone with no vendor advisory consulted.
Linha do tempo
-
Compass Communications ransomware intrusion in Auckland, RA World claims 250 GB with unverified customer impact
ler a análise desta fonte ocultar
In December 2024, Compass Communications, an Auckland telecommunications provider, detected unauthorised access to its systems, engaged outside security specialists and notified New Zealand's Privacy Commissioner. The ransomware group RA World claims it stole 250 GB of data and posted a 26.9 MB sample that, according to a Cyber Daily report cited by the article, contains service agreements, financial statements and customer banking details. Compass confirmed the intrusion and said its initial investigation suggested some customer information may have been accessed, promising direct contact where it finds impact, but it has published no customer count or verified data volume. The archive's size says little about how many people or accounts are affected, or whether the records belong to current or former customers. The article sets this case beside Spark New Zealand's annual breach figures, which are company-wide and give no customer totals for FY25 and FY26. Criticity is high because the intrusion is confirmed and banking data may be exposed, while the scope remains unverified, no CVE or initial access vector is reported, and this record rests on the article alone with no vendor advisory consulted.