Notification - Cyber Incident

On 30 June 2025, Innes Dean Lawyers Limited were impacted by a cyber incident via our external IT service provider. 

On 28 July data taken from a backup held by the same external IT service provider was published to a site on the darkweb. We note that the backup related to a historic server and included some client information.

In response Innes Dean Lawyers Limited engaged external forensic and cyber experts who have analysed the dataset.  As a result, we have sent direct notifications to those individuals with IDs and other similar documents impacted.  We note that the backup also contained a range of data relating to other clients, including some work product. Unfortunately, it has not proven feasible to notify these clients directly in every case.

We can confirm that Innes Dean Lawyers Limited has notified the Office of the Privacy Commissioner of the incident. 

Given the information impacted we would urge clients to remain vigilant and report any suspicious activity.  Helpful advice for staying safe and avoiding scams or fraud can be found on the National Cyber Security Centre (NCSC)'s "own your online" website: https://www.ownyouronline.govt.nz

If you would like to make any inquiries regarding this notice, please contact us on 06 358 6075 or email response@innesdean.co.nz.  You also have the right, if you have been impacted, to make a complaint to the Commissioner.

The Innes Dean Lawyers team