New Zealand
NZL
Mercury IT cyberattack disrupts Accuro insurance claims and customer operations
A late-November 2022 cyberattack on New Zealand IT provider Mercury IT resulted in encrypted servers and unavailable systems used by customer Accuro Health Insurance. Accuro confirmed disruption to core operating systems, slower manual claims processing, delayed claims payments, premium-billing difficulties and restricted customer communications. Important service limitations persisted into 2023. The directly attacked organization was Mercury IT, not Accuro.
83
Estimated severity
83 / 100
84
Source reliability
84 / 100
Approximate Date
2022-11-29
Targeted Company
MERCURY IT
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
ACCURO HEALTH INSURANCE (IT service provider)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
New Zealand
Affected countries
New Zealand
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Downstream customer disruptionERP or business system disruptionService degradationSupplier operation disruption
Affected sectors
Finance & InsuranceTechnology & IT Services
Affected departments
Information Technology
Attack Profile
Attack types
RansomwareUnauthorized access
Attributed threat actors
No information
Sources
Incident Sources
accuro.co.nzhttps://www.accuro.co.nz/about/cyber-incident/customer-communicationsaccuro.co.nzhttps://www.accuro.co.nz/about/cyber-incident/media-statementsaccuro.co.nzhttps://www.accuro.co.nz/about/cyber-incident/update-to-accuro-paymentstherecord.mediahttps://therecord.media/multiple-government-departments-in-new-zealand-affected-by-ransomware-attack-on-it-provider