Another EQC privacy breach revealed

Lianne Dalziel
Lianne Dalziel
Details of a new privacy breach involving the Earthquake Commission has been revealed in Parliament today.

Labour's earthquake commission spokeswoman Lianne Dalziel revealed in question time today that EQC sent another email to a client about his claim a month ago with a spreadsheet attached containing names, cheque numbers and client details of over 2000 claimants.

Ms Dalziel said the client sent a message to EQC this week via its website and asked for the chief executive to contact him but he hadn't heard back.

"This is an absolute scandal and proof that there is a systemic problem with the security of electronic data held by EQC and other agencies across the entire state sector.

"We've now had major breaches at EQC, ACC, MSD, IRD, Corrections and Novopay."

Ms Dalziel was granted an urgent question in the house today of Canterbury Earthquake Recovery Minister Gerry Brownlee.

She asked: "What action is he going to take to stop further EQC breaches in light of today's revelation that they have sent claims, details including names, and bank account numbers to a claimant?"

She later corrected her question saying the numbers were cheque numbers and potentially not bank account numbers.

On Friday it was revealed EQC had mistakenly sent to chief executive of insurance resolution company Earthquake Services and former EQC contractor Bryan Staples an email with the claim status and private details of 83,000 claimants, covering 98,000 claims.

He viewed the email with five others in the office before deleting it and signing a statutory declaration that he had done so.

Next week Mr Staples will file a request to the District Court for him to retrieve the email to use in a civil case against EQC.

He told Radio New Zealand that for EQC to come out and say the data only included claim numbers and addresses was "absolute bulls***".

The Commission yesterday laid a complaint with Christchurch police that Mr Staples had "gone back on his word, and in the process may have broken the law".

The details of the email were relayed indirectly to Ms Dalziel by one of the other people present in the office.

Mr Staples denied going back on his word, saying EQC's police complaint was "bullying tactics".

Add a Comment