{"id":595994,"date":"2026-09-10T11:22:10","date_gmt":"2026-09-10T11:22:10","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/595994\/"},"modified":"2026-09-10T11:22:10","modified_gmt":"2026-09-10T11:22:10","slug":"new-zealand-payroll-firm-apologises-after-being-caught-up-in-data-breach","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/595994\/","title":{"rendered":"New Zealand payroll firm apologises after being caught up in data breach"},"content":{"rendered":"

\u201cWe know our customers trust us with important information and we apologise for the concern and disruption this incident may cause,\u201d the company said. \u201cWe understand that Thankyou Payroll is one of a number of businesses impacted as this is a global incident involving many companies worldwide.\u201d<\/a><\/p>\n

Thankyou Payroll said it had strengthened its security protections, asked customers to reset their passwords and notified the Office of the Privacy Commissioner.<\/p>\n

\u201cOnce you complete the mandatory password update upon your next login, your account is fully secure and you can run payroll as normal.\u201d<\/p>\n

Reports suggest Metabase advised users in August it had found a \u201ccritical vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access\u201d. It provided a fix, asking users to update \u201cas soon as possible\u201d.<\/p>\n

One analyst said there were thousands of potential targets, including \u201ccritical infrastructure sectors including government, healthcare, energy, finance, telecom, aviation, and large public organisations\u201d.<\/p>\n

Thankyou Payroll said passwords and credit card numbers were safe.<\/p>\n

The breach was reported the same day it was reported a large number of files relating to clinical trials run by ZenTech, a privately owned New Zealand company, may have been stolen.<\/p>\n","protected":false},"excerpt":{"rendered":"\u201cWe know our customers trust us with important information and we apologise for the concern and disruption this…\n","protected":false},"author":2,"featured_media":595995,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[74,43507,682,4378,138,9525,3105,1651,1138,78,117,111,139,69,37066,154770,810,80],"class_list":["post-595994","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-after","tag-apologises","tag-being","tag-breach","tag-business","tag-caught","tag-data","tag-digital","tag-firm","tag-in","tag-new","tag-new-zealand","tag-newzealand","tag-nz","tag-payroll","tag-reporters","tag-up","tag-zealand"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/595994","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=595994"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/595994\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/595995"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=595994"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=595994"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=595994"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}