Incident response · Auckland
Cyber incident response, Auckland.
When a cyber incident hits an Auckland business, you need help on New Zealand time. Email Authene and a responder replies within 15 minutes, 24/7/365, and starts working remotely straight away.
Response
15 minutes, 24/7/365
How
Remote response, so no travel time
Time zone
NZST, and NZDT in daylight saving
Covers
Auckland and the upper North Island
If it’s happening now
What to do first in Auckland
- Don’t power off affected computers. Disconnect them from the network instead
- If money may have moved, call your bank now and ask them to try to recall it
- Don’t delete emails, files or accounts. They are evidence
- Follow your insurer’s incident process if you have cyber cover
- Report it to the NCSC. If money has been lost, also tell Police on 105
- Email response@authene.com.au. A responder replies within 15 minutes
Remote response for Auckland
Remote help across Tāmaki Makaurau
Authene responds remotely, so a Auckland business doesn’t wait for anyone to travel. The evidence in a modern incident mostly sits in Microsoft 365, cloud services and system logs, which we reach securely from anywhere.
If something needs hands on a device, we guide your IT team or provider through it, step by step.
Incidents we respond to
Incidents we handle in Auckland
You don’t need to know what kind of incident it is before you get in touch.
Auckland in numbers
Where Auckland stands.
Sources: Knowledge Auckland (Auckland Council) and NCSC cyber security insights, April to June 2026. NCSC figures are national.
38%
of New Zealand’s GDP is produced in Auckland, so incidents here often affect businesses across the country.
1,129
cyber security incidents were reported to the NCSC nationally between April and June 2026.
$2.7m
in direct financial losses were reported over the same three months. Scams and fraud were the most common incident type.
Industries we see in Auckland
Where Auckland’s incidents start.
As the country’s commercial centre and main gateway for trade, Auckland sees incidents that cross borders and time zones.
Importers and exporters
Overseas suppliers, foreign-currency payments and long email threads make invoice fraud harder to spot. We find which side’s mailbox was used.
Professional and financial services
Client trust and client money are the target. We establish what was accessed so you can tell clients the truth quickly.
Property and construction
Deposits, settlements and progress payments move large sums by email instruction. If money has moved, call your bank first.
How it can play out
An Auckland example: the container payment
Illustrative example. Names, amounts and times are made up. See our case studies for real incidents.
Mon 9 am
An importer receives a supplier’s “new bank account” notice ahead of a large container payment.
Mon 9:30 am
Something feels off, so they email Authene before paying anything.
Mon 9:41 am
A responder replies and asks them to check with the supplier through a contact they already hold.
Mon afternoon
The supplier’s mailbox, not the importer’s, turns out to be compromised. Nothing is paid.
Tue
The importer gets a short summary to pass to the supplier, so they can act on their side.
Working across the Tasman
Two countries, one response.
Many Auckland businesses also trade in, or hold data about people in, Australia. An incident can raise questions in both countries: New Zealand’s Privacy Act and the Australian Notifiable Data Breaches scheme.
We respond across both, on Auckland and Australian time, and give your legal counsel one set of facts for both.
One set of facts
For both sides of the Tasman.
Whether a breach must be notified in either country is a question for your legal counsel. We give them one consistent account of what happened, what was accessed and when.
Time zone
On Auckland time, not Sydney’s.
Auckland is usually two hours ahead of Sydney. Your Monday 7am is 5am in Sydney, when many Australian providers aren’t answering yet.
We respond 24/7/365 on New Zealand time, including weekends and public holidays.
Long weekends
From Auckland Anniversary Day on
Auckland Anniversary Day in late January lands just as many businesses reopen after the summer break, with inboxes full and attention thin.
We respond 24/7/365, on New Zealand time, public holidays included.
Help and reporting in New Zealand
Where to report a cyber incident in New Zealand
These services are free. CERT NZ is now part of the National Cyber Security Centre. Your legal counsel can tell you whether you must notify anyone. More on incident response in New Zealand.
Questions
Cyber incident questions from Auckland
Who do Auckland businesses report a cyber incident to?
Report cyber security incidents, scams and attacks to the National Cyber Security Centre, which now includes CERT NZ. If money has been stolen, call your bank straight away and consider reporting to police on 105.
Is Authene an Australian company? Does that matter?
Authene responds across Australia and New Zealand. We work on New Zealand time and understand New Zealand reporting routes.
What should we do if we paid a fake invoice?
Call your bank immediately and ask them to try to recall the payment, then report it to the NCSC. Don’t reply to the suspicious email thread. Then get in touch so we can find out how the attacker got in. See business email compromise.
How much does incident response cost?
It depends on the incident. After triage we agree what needs answering and give you an estimate before the work grows. Many cyber insurance policies cover incident response. See how pricing works.
Auckland
Incident in Auckland? Email us now.
Email us and a responder will reply within 15 minutes, 24/7/365, on New Zealand time. If you’re not sure it’s an incident yet, get in touch anyway.