12:38 pm today

Mortgage broker Squirrel's 'security incident' exposes details of 600 investors

12:38 pm today
Teenage Hacker Girl Attacks Corporate Servers in Dark, Typing on Red Lit Laptop Keyboard. Room is Dark

(file image) Photo: 123RF

Mortgage broking and investment firm Squirrel has been the target of a "security incident" which has exposed the passport or driver's licence details of 600 peer-to-peer investors.

Squirrel told clients an authorised user had gained access to a third-party system, that was used as part of its investor registration process.

That had allowed the person to extract personal information - specifically passport or driver's licence details - for customers who had registered in the 30 days leading up to 21 July.

  • Protecting yourself after a data breach: What you need to know
  • Squirrel founder John Bolton said the system held customer's identification details for 30 days, because sometimes the details were not accurately captured and had to be collected again.

    "It holds it for 30 days then it drops off… The data that was exposed was people's name, date of birth and ID number... there was no Squirrel info or any more personal info exposed."

    Squirrel had contacted people who were affected and offered them help with replacing their identification documents, he said.

    Get the RNZ app

    for ad-free news and current affairs