Terms & Privacy

NZ ThreatWatch aggregates publicly available ransomware and cyber threat intelligence from third-party security platforms (including ransomware.live and RansomLook) to raise awareness of threats targeting New Zealand organisations. The dashboard is provided for informational and situational-awareness purposes only.

This site does not host, control, or endorse any content published on external leak sites or darknet (.onion) portals. We only source and link to data published by other security platforms. We take no responsibility for the content hosted on those external services, the accuracy of their claims, or any harm resulting from visiting them. Do not open Onion links unless you are prepared for what the darknet holds.

Threat listings are claims made by threat actors and may be inaccurate, exaggerated, or fabricated. If your organisation appears on this feed, do not assume a breach has occurred. Contact your internal IT team or managed service provider to investigate and verify the incident before taking action.

If a cyber incident is confirmed, contact your cyber or business insurance provider as early as possible. Many policies require prompt notification and may provide access to incident response, legal, and forensic resources. Failing to notify promptly can affect your cover. Keep records of all actions taken and communications made.

1. 1Stay calm and contain — disconnect affected systems from the network to stop the spread, but do not power off devices (evidence may be lost).
2. 2Contact your IT team or managed service provider immediately to assess and verify the incident.
3. 3Notify your cyber insurance provider as early as possible — many policies require prompt notification and may provide incident response resources.
4. 4Preserve evidence — take notes, screenshots, and logs; do not delete files or communications.
5. 5Identify the scope — determine which systems, data, and users are affected.
6. 6Report the incident to CERT NZ (cert.govt.nz) and, if a crime is suspected, to the New Zealand Police.
7. 7Communicate carefully — inform stakeholders and affected parties as required by law and your own policy.
8. 8Recover — restore systems from clean backups, rebuild compromised machines, and reset credentials.
9. 9Review and improve — conduct a post-incident review to strengthen defences and update your response plan.

Report incidents to CERT NZ at cert.govt.nz

NZ ThreatWatch stores only the threat data it sources and any consultation requests you voluntarily submit through the contact form. Your contact details are used solely to respond to your enquiry and are not shared with third parties. Location enrichment uses web search to resolve company headquarters from publicly available information. We do not knowingly collect personal data beyond what is needed to operate the service.