Archive · 24 Sep 2026
New Zealand Names China Its Most Persistent Cyber Threat
New Zealand released a report about cyberattacks linked to foreign governments.
It said China was the most persistent and capable suspected threat.
The report also mentioned suspected activity from Russia, Iran and North Korea.
Many targets were government offices, hospitals, schools and technology companies.
The agency examined 369 serious cyber incidents during the year ending in June 2026.
It believed 86 of them may have involved state-backed actors.
Hackers can secretly study computer systems and stay inside them for months or years.
New Zealand warned that this could eventually expose important information or disrupt services.
China has routinely denied allegations of cyber espionage.
New Zealand’s National Cyber Security Centre identified China as the most persistent and capable state-backed cyber threat to the country.
The agency linked suspected state-sponsored cyber activity to actors from China, Russia, Iran and North Korea.
Of 369 cyber incidents considered potentially nationally significant in the year to June 2026, 86 had suspected state-sponsored links.
Targets included government agencies, health and education organisations, and information-technology providers.
The agency warned that cyber espionage could compromise infrastructure, networks, operational technology, and personal or corporate data.
- Who
- New Zealand’s National Cyber Security Centre identified suspected state-backed actors from China, Russia, Iran and North Korea; China was assessed as the most persistent and capable.
- What
- The agency released an annual Cyber Threat Report warning about foreign state-backed cyber activity targeting New Zealand.
- When
- The report was released on Thursday and covered the year to June 2026.
- Where
- New Zealand, including government and critical sectors; the agency also warned about activity affecting the South Pacific.
- Why
- Foreign actors were suspected of seeking sensitive information, strategic advantages, access to networks and infrastructure, or the ability to disrupt services.
New Zealand’s Assessment
China’s Position
Alleged cyber activity
New Zealand’s Assessment
New Zealand’s cyber security agency said China was the most persistent and capable state actor undertaking cyber activity in New Zealand and linked suspected activity to Chinese actors.
China’s Position
Beijing has routinely denied allegations of Chinese cyber espionage.
- Agency
- National Cyber Security Centre, part of New Zealand’s intelligence community
- Primary assessed threat
- China was described as New Zealand’s most persistent and capable state-backed cyber threat
- Other suspected actors
- Russia, Iran and North Korea
- Incidents reviewed
- 369 cyber incidents deemed potentially nationally significant
- Suspected state-linked incidents
- 86 incidents had suspected links to state-sponsored actors
- Reporting period
- Year ending June 2026
- Reported targets
- Government agencies, health and education organisations, and information-technology managed-service providers