New Zealand says China is its most persistent state-backed cyber threat

New Zealand's National Cyber Security Center has identified China as the most persistent and capable state-backed cyber threat, with 86 nationally significant cyber attacks linked to state actors from China, Russia, Iran, and North Korea in the past year. The report highlights geopolitical competition in the South Pacific, targeting government agencies, health and education organizations, and IT providers.

New Zealand's National Cyber Security Center (NCSC) has released its annual Cyber Threat Report, identifying China as the most persistent and capable state-backed cyber threat facing the country. The report, published on Thursday, states that 86 of 369 cyber incidents deemed of potential national significance in the year to June 2026 had suspected links to state-sponsored actors. These incidents targeted government agencies, health and education organizations, and IT managed-service providers. The NCSC also linked suspected state-sponsored cyber activity to actors from Russia, Iran, and North Korea. The agency warned that geopolitical competition is increasingly playing out in the South Pacific, where state-backed cyber espionage targets governments and infrastructure. The assessment follows a report from New Zealand's security agency in August that said China was the only country New Zealand had detected conducting espionage at scale. China has routinely denied allegations of cyber espionage.