The Reserve Bank of New Zealand (Te Pūtea Matua) said it had been told the attack was not specifically aimed at it, and other users of the file-sharing system from Accellion, known as File Transfer Application, were also compromised.
The bank, alongside cyber security experts, is working to establish “the nature and extent of information that has been potentially accessed” and said the compromised data “may include” commercially and personally sensitive information.