Ransomware attack on NZ coronial services delays investigations, grieving families left waiting
Severity: medium · Patch status: no-fix-needed · Since 2026-10-28
A major ransomware attack on New Zealand's coronial services has caused significant delays to coronial investigations. One family has waited more than nine months for answers following their mother's unexpected death, describing the wait as 'incredibly stressful', and were told the ransomware attack contributed to the delay. The incident affects grieving families awaiting coronial findings across NZ. The report does not state when the attack occurred, which systems were compromised, whether data was stolen or leaked, or whether a ransom was paid. No technical details, CVEs, or named threat actor are given. As a breach of a public service, remediation rests on the responsible agency's incident response rather than a vendor patch.
What to do
- Organisations in the justice/coronial sector should review ransomware resilience, backups, and incident response plans
- Agencies should communicate proactively with affected families about delays and expected timelines
- Verify restoration of affected systems and monitor for follow-on extortion or data leaks
Sources
All live incidents on Threat Watch
