Waikato DHB ransomware attack investigation summary report
Scott made this Official Information request to Government Communications Security Bureau
The request was successful.
From: Scott
Dear Government Communications Security Bureau,
The recently released InPhySec investigation into the Waikato DHB ransomware incident refers to a NCSC document that was shared with the report authors:
“GCSB’s involvement through NCSC (the latter is an operating name of the former) included understanding how the attack happened. We have seen the relevant redacted summary of this work, and this is reflected in our report.”
I would like to request a copy of the "summary" that was shared with the report authors that is referenced here.
Yours faithfully,
Scott
From: Information (GCSB)
Government Communications Security Bureau
Tēnā koe,
Thank you for your Official Information Act request.
We will endeavour to respond to your request as soon as possible and, in any event, no later than 20 working days after the day that your request was received. If we are unable to respond to your request by then, we will notify you of an extension of that timeframe.
If you have any queries, please feel free to contact [GCSB request email].
Ngā mihi,
GCSB
-----Original Message-----
From: Scott <[FOI #21401 email]>
Sent: Monday, 12 December 2022 9:39 AM
To: Information (GCSB) <[GCSB request email]>
Subject: Official Information request - Waikato DHB ransomware attack investigation summary report
Dear Government Communications Security Bureau,
The recently released InPhySec investigation into the Waikato DHB ransomware incident refers to a NCSC document that was shared with the report authors:
“GCSB’s involvement through NCSC (the latter is an operating name of the former) included understanding how the attack happened. We have seen the relevant redacted summary of this work, and this is reflected in our report.”
I would like to request a copy of the "summary" that was shared with the report authors that is referenced here.
Yours faithfully,
Scott
-------------------------------------------------------------------
This is an Official Information request made via the FYI website.
Please use this email address for all replies to this request:
[FOI #21401 email]
Is [GCSB request email] the wrong address for Official Information requests to Government Communications Security Bureau? If so, please contact us using this form:
https://fyi.org.nz/change_request/new?bo...
Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers
If you find this service useful as an Official Information officer, please ask your web manager to link to us from your organisation's OIA or LGOIMA page.
-------------------------------------------------------------------
This electronic message, together with any attachments, contains information that is provided in confidence and may be subject to legal privilege.
Any classification markings must be adhered to. If you are not the intended recipient, you must not peruse, disclose, disseminate, copy or use the message in
any way. If you have received this message in error, please notify us immediately by return email and then destroy the original message.
The New Zealand Intelligence Community (NZIC) and the departments comprising the NZIC accepts no responsibility for changes to this e-mail, or to any attachments, after its transmission
from NZIC. This communication may be accessed or retained for information assurance purposes. Thank you.
hide quoted sections
From: Information (GCSB)
Government Communications Security Bureau
Tēnā koe,
Please find attached a response from the acting Director-General to your OIA request.
Ngā mihi,
GCSB
-----Original Message-----
From: Scott <[FOI #21401 email]>
Sent: Monday, 12 December 2022 9:39 AM
To: Information (GCSB) <[GCSB request email]>
Subject: Official Information request - Waikato DHB ransomware attack investigation summary report
Dear Government Communications Security Bureau,
The recently released InPhySec investigation into the Waikato DHB ransomware incident refers to a NCSC document that was shared with the report authors:
“GCSB’s involvement through NCSC (the latter is an operating name of the former) included understanding how the attack happened. We have seen the relevant redacted summary of this work, and this is reflected in our report.”
I would like to request a copy of the "summary" that was shared with the report authors that is referenced here.
Yours faithfully,
Scott
-------------------------------------------------------------------
This is an Official Information request made via the FYI website.
Please use this email address for all replies to this request:
[FOI #21401 email]
Is [GCSB request email] the wrong address for Official Information requests to Government Communications Security Bureau? If so, please contact us using this form:
https://fyi.org.nz/change_request/new?bo...
Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers
If you find this service useful as an Official Information officer, please ask your web manager to link to us from your organisation's OIA or LGOIMA page.
-------------------------------------------------------------------
This electronic message, together with any attachments, contains information that is provided in confidence and may be subject to legal privilege.
Any classification markings must be adhered to. If you are not the intended recipient, you must not peruse, disclose, disseminate, copy or use the message in
any way. If you have received this message in error, please notify us immediately by return email and then destroy the original message.
The New Zealand Intelligence Community (NZIC) and the departments comprising the NZIC accepts no responsibility for changes to this e-mail, or to any attachments, after its transmission
from NZIC. This communication may be accessed or retained for information assurance purposes. Thank you.
hide quoted sections
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence