A recent phishing attack on Hutt City Council has compromised the identity and financial information of hundreds of residents. This incident, which occurred on March 1, 2026, has raised significant concerns about cybersecurity in local government.
The Hutt City Council confirmed that the attack exposed sensitive data for approximately 732 individuals, with the identity information of five people being specifically compromised. The breach originated when a staff member responded to a phishing email, inadvertently allowing hackers access to critical information.
This incident reflects a troubling trend in cybersecurity, as local councils face increasingly sophisticated threats. Cybercriminals are utilizing advanced methods—such as artificial intelligence—to automate scams and evade detection. As a result, many organizations find themselves vulnerable to similar attacks.
Key facts:
- The council has reported the incident to the Office of the Privacy Commissioner.
- All affected individuals have been contacted and provided guidance on securing their information.
- The council described the incident as ‘deeply regrettable’ and unacceptable.
Jo Miller, Chief Executive of Hutt City Council, expressed regret over the incident: “We are sorry this has occurred and acknowledge the concern it may have caused.” The council is taking immediate steps to enhance its cybersecurity measures, including implementing additional safeguards and strengthening system security.
In light of this breach, officials emphasized the importance of email security and vigilance against phishing attempts. “Any exposure of personal information is not acceptable,” stated a representative from the Hutt City Council. As they work to rectify this situation, residents are urged to remain alert regarding their personal data.




