Health New Zealand has briefed Health Minister Simeon Brown on a cyber incident involving Zenith Technology (ZenTech), the minister’s office has confirmed.
Police are investigating the incident in which a large number of files relating to clinical trials run by ZenTech – a privately owned company – may have been stolen, Stuff reported.
The files reportedly included sensitive health information.
“Any further questions should be directed to ZenTech and Health New Zealand,” a spokesperson for the minister said.
Police confirmed they were aware of an incident and in a statement to RNZ said they are “in the early stages” of their investigation and are working alongside Health NZ.
In a statement to RNZ on Thursday night, Zentech said certain systems have been taken offline as a precaution while it makes sure its IT environment is secure and the incident has been contained.
“We are aware that some sample material purported to be company data has been published online. As a matter of priority, we have engaged independent cyber security experts to investigate the incident and assess the nature and extent of any impact.
“We are working closely with relevant authorities and government agencies, including Health New Zealand.”
Zenith Technology said it would provide updates when more information is available.
According to threatintel.co.nz – a site that monitors cyber attacks – an “emerging threat group” claimed responsibility for an attack at the end of last month.
ZenTech had been listed on a data leak site operating on the dark web, threatintel.co.nz reported, saying the group appeared to be a “relatively new entrant to the ransomware and data extortion landscape”.
The report included a screenshot of a ransom note reportedly sent to victims, in which the group claimed that it was not politically motivated and wanted “nothing but financial rewards for our work”.
The office of ZenTech – Zenith Technology in Dunedin.
RNZ / Tess Brunton
Another cybersecurity monitor claimed the “financially motivated” group targeted small- to mid-sized businesses using “hands-on-keyboard methods and has an extortion data leak site for publishing victim details”.
In a statement, a Health NZ spokesperson said it was supporting ZenTech with its response to a cyber incident and the company had engaged specialist cyber forensic support.
Health NZ said it was made aware of the incident after files attributed to ZenTech were identified online, and there was no impact on Health NZ digital systems.
“We recognise the public interest in this incident and the concern cyber events can cause. Our priority is to ensure the response is thorough, coordinated and based on verified information.”
They said the right agencies and specialist experts were involved but because it was an ongoing police investigation, there were limits on what could be said publicly.
“Where any information is confirmed that indicates risk to individuals, Health NZ will work with the impacted organisation and relevant agencies to ensure appropriate steps are taken to notify and support those affected.”
Pharma trials
According to its website, ZenTech was founded in 1987 and conducts clinical trials for the pharmaceutical industry. It has an analytical laboratory service and dedicated clinical site that can house up to 60 trial participants.
Its services include the “development, assessment and approval of protocols with the assistance of the New Zealand Health and Disability Ethics Committees” and “first-in-person” and “first-in-patient” studies.
It states becoming a participant in a clinical trial is a “benevolent act” that helps “advance science and medicine” and that volunteers are compensated for their time and inconvenience.
ZenTech’s social media page shows a series of posts recruiting participants for clinical trials.
Student magazine Critic Te Ārohi from the Otago University Students’ Association, has reported on the experiences of students taking part in such trials. An article from March 2025, titled ‘Bodies on the Line:
Students selling themselves to science’ spoke to one student who was paid $650 to take part in a two-day trial for eczema cream treatment.
Discussion about this post