www.bennettcurrie.co.nz Listed by ransomhub Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 28 August 2024, the New Zealand accounting and business advisory firm operating at www.bennettcurrie.co.nz was listed by the ransomware group known as RansomHub. Public reporting indicates that internal files were exfiltrated during a ransomware attack. The number of people affected remains unknown, and further technical details of the incident have not been disclosed.

Because the firm handles sensitive financial and advisory information for clients, any confirmed exposure of internal material carries potential consequences for individuals and businesses that rely on its services. At this stage the listing itself constitutes a claim by the group rather than independently verified confirmation of the full scope of compromise.

What happened

According to available records, www.bennettcurrie.co.nz appeared on a RansomHub leak-site listing dated 28 August 2024. The report states that internal files were exfiltrated in a ransomware attack. No public information has been released about the precise date of intrusion, the initial access method, the volume of data taken, or whether encryption of systems occurred alongside the claimed exfiltration. The number of individuals or client entities potentially affected is listed as unknown. Beyond the group’s assertion that internal files were removed, no further verified technical indicators or forensic findings have been made public.

Inside ransomhub

RansomHub is a ransomware operation that functions on a ransomware-as-a-service model. It emerged in early 2024 following the disruption of earlier groups and has since listed numerous organisations across multiple sectors. The group typically employs double-extortion tactics: encrypting systems while simultaneously copying data and threatening to publish it if a ransom is not paid. Victims are commonly named on a dedicated leak site, sometimes accompanied by sample files, as pressure to negotiate. RansomHub affiliates have been observed targeting professional-services firms, healthcare providers and other entities holding confidential records. Public reporting on the group’s broader activity is extensive, yet any specific claims made about www.bennettcurrie.co.nz remain unverified assertions by the actors themselves.

www.bennettcurrie.co.nz and its sector

Bennett Currie is a professional accounting and business advisory firm based in New Zealand. It provides services that include accounting, tax planning, business consulting and financial advisory work for both businesses and individuals. Firms of this type routinely hold client financial statements, tax records, payroll data, corporate structures and correspondence containing personal and commercial details. In New Zealand’s professional-services sector, such practices act as trusted custodians of information that is often subject to privacy and confidentiality obligations. A ransomware incident affecting an accounting firm therefore raises questions about the security of client material that may have been stored on internal systems or shared during advisory engagements.

What data was at risk

The only data type named in public reporting is “internal files exfiltrated in ransomware attack.” No inventory of specific file categories, client names, or record counts has been released. Organisations of this kind typically maintain ledgers, tax filings, contracts, identity documents supplied by clients, bank details and internal working papers. Because the exact contents of the claimed exfiltration remain unconfirmed, it is not possible to state with certainty which of these categories, if any, were involved. Readers should treat any assertion of precise data types beyond the reported “internal files” as unsubstantiated until official notification is issued by the firm or relevant authorities.

What's at stake

If internal files containing client information were indeed taken, affected individuals and businesses could face risks of identity misuse, targeted phishing, or unauthorised access to financial accounts. Commercial clients might encounter competitive harm if proprietary figures or strategies were exposed. For the firm itself, the incident may trigger regulatory scrutiny under New Zealand privacy law, potential civil claims, and reputational damage that could affect ongoing client relationships. Even where encryption is not confirmed, the mere possibility of data leakage creates uncertainty that clients must manage by monitoring accounts and communications. No public evidence has established the precise scale of these risks in this case.

Were you affected?

If you are a current or former client of Bennett Currie, monitor bank and tax accounts for unusual activity and treat unsolicited requests for personal or financial details with caution. Consider placing fraud alerts with relevant credit-reporting agencies and retain copies of any official notifications you receive from the firm. Because the number of people affected is unknown and no comprehensive list of exposed records has been published, proactive checking is advisable. Readers can run a free exposure scan of their email address to determine whether their information has already appeared in known breach data sets elsewhere. Any confirmed compromise should be reported promptly to the firm and, where appropriate, to New Zealand’s privacy authorities.

AICompiled with AI assistance from public sources and published under our editorial standards.