Sharechat Logo

Z Energy says customer data breached by security flaw

Wednesday 27th June 2018

Text too small?

 Z Energy says its customer database for the Z card online was breached due to a security flaw and has advised affected customers and the Privacy Commissioner of the failing.

 

Stuff today reported the breach of the online system, which lets people manage fuel accounts mainly business fleets. Z wasn't aware of the extent of the breach until it was told this week during the media company's investigation, it reported.

 

Wellington-based Z released a statement saying it was presented with evidence today that the database was accessed by a third party in November last year and "has immediately acted to let affected customers know what data may have been accessed and has also advised the Privacy Commissioner of the breach".

 

The transport fuels company was aware of the vulnerability last November and took steps to deal with the flaw, closing the system on Dec. 15 last year, it said. The database included information such as a customer's name, address, registration number, vehicle type and credit limits with Z, but no "bank details, pin numbers or information that would put customer finances directly at risk".

 

"Z takes its data privacy responsibility and threats to cyber security very seriously and is taking steps to ensure the company learns from this incident," it said.

 

The statement was released after the close of trading, although Stuff broke its story in the late afternoon. The shares fell 0.3 percent to $7.49.

 

(BusinessDesk)



  General Finance Advertising    

Comments from our readers

No comments yet

Add your comment:
Your name:
Your email:
Not displayed to the public
Comment:
Comments to Sharechat go through an approval process. Comments which are defamatory, abusive or in some way deemed inappropriate will not be approved. It is allowable to use some form of non-de-plume for your name, however we recommend real email addresses are used. Comments from free email addresses such as Gmail, Yahoo, Hotmail, etc may not be approved.

Related News:

2025 Annual Shareholders' Meeting and Director Nominations
Meridian Energy monthly operating report for July 2025
August 15th Morning Report
VGL upgrades aspirations, accelerates to meet client demand
August 14th Morning Report
VHP - Focus on Fundamentals: Driving Operational Performance
August 13th Morning Report
Devon Funds Morning Note - 12 August 2025
Spark announces sale of 75% of data centre business
Blackpearl Announces $15M Capital Raise & Market Update