New Zealand’s National Cyber Security Centre has identified China as the country’s most persistent and capable state-backed cyber threat, placing the assessment in its annual report released Thursday.
The agency attributed suspected state-sponsored activity to actors linked with China, Russia, Iran and North Korea. Of 369 incidents assessed as potentially significant to the country in the year to June, 86 had suspected links to state-backed actors.
Targets included government bodies, health and education organisations and managed-service providers. The report also warns that competition in the South Pacific is increasingly expressed through cyber espionage aimed at governments and infrastructure.
Beijing rejected the assessment. A Chinese foreign ministry spokesperson said China opposes hacking and accused the New Zealand institution of spreading falsehoods. The report is an intelligence assessment, not a judicial finding, and it does not disclose enough operational detail for each attribution to be tested in public.
Its practical importance lies in the duties it signals for organisations holding sensitive information or running essential services. The centre warns that state actors may establish quiet access months or years before using it for intelligence collection or disruption, making conventional incident response too late on its own.
The report also draws attention to North Korean IT workers covertly obtaining remote employment, conduct that can engage sanctions rules as well as employment, security and reporting obligations. New Zealand organisations are being asked to treat cyber screening as a governance function rather than a problem left solely to technical teams.
The official report is available from the National Cyber Security Centre.
