Kiwi payroll firm caught up in 'global' data breach
New Zealand-based Thankyou Payroll suffered a data breach after a third-party reporting tool, Metabase, was compromised. The company confirmed that customer names, addresses, and financial details were accessed, though passwords and credit card numbers remained secure.
Why it matters
The incident highlights the risks associated with supply chain vulnerabilities in software tools used by businesses to manage sensitive financial data.
A New Zealand payroll operator says it has been caught up in a "global" data security incident that has resulted in unauthorised access to some of its customers' data.
Thankyou Payroll, which services a number of charities, said on Thursday customer data held by a "third-party reporting tool" called Metabase had been accessed.
None of its own systems had been breached, it said, and its Metabase tool had been taken offline.
Information accessed included names, IRD numbers, email and physical addresses, bank account details and payment histories.
"We know our customers trust us with important information and we apologise for the concern and disruption this incident may cause," the company said. "We understand that Thankyou Payroll is one of a number of businesses impacted as this is a global incident involving many companies worldwide."
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in