The New Zealand Cyber Security Agency (NCSC) has reported that China is recognized as the most persistent and capable state actor in terms of cyber threats in the country. This recently published report refers to foreign activities targeting government entities and organizations in various sectors, including health, education, and information technology.
Cyber Threats and International Actors
NCSC, in its annual report, has identified activities likely originating from foreign state actors that pose a risk to sensitive information in New Zealand. The agency specifically pointed out suspicious cyber activities from China, Russia, Iran, and North Korea, stating that the People's Republic of China conducts the most cyber activities in New Zealand among these countries.
This assessment serves as a new warning from a Western-aligned intelligence agency regarding China's cyber espionage, which Beijing has consistently denied. A previous report from New Zealand's security agency in August identified China as the only country where New Zealand has successfully detected "scale" espionage activities.
Dimensions of Cyber Threats
The cybersecurity report states that out of 369 cyber incidents recognized as potentially significant to national security in the year ending June 2026, 86 had suspicious links to state actors. These incidents included activities targeting government entities, health and educational organizations, and IT management service providers.
NCSC has also warned that geopolitical rivalries are increasingly shaping up in the South Pacific, and the agency is aware of state-sponsored cyber espionage activities targeting government entities and infrastructure. New Zealand has close familial, cultural, political, and economic ties across the Pacific, and such activities could have negative impacts on citizens, businesses, and civil institutions.
State actors typically target entities that manage infrastructure or networks, provide essential public services, or hold information that could provide them with a strategic advantage. NCSC has warned that cyber espionage can be difficult, and actors may spend months or years identifying and accessing systems to use them for information gathering or disruption.
Long-term intrusions can lead to damage to operational technology and loss of corporate and personal data. This situation increases the need for special attention and preparedness against cyber threats.
Read more: US Vice President Criticizes Artificial Intelligence Developers · China and Iran's Diplomacy in the Gulf Crisis
