1. [News](/news) 2. New Zealand central bank's file sharing vendor breached Accellion # New Zealand central bank's file sharing vendor breached A third-party file secure sharing supplier for the Reserve Bank of New Zealand was breached in a cyberattack. Edward Kost January 13, 2021 Accellion, a third-party secure file sharing supplier for the Reserve Bank of New Zealand, was breached in a cyberattack. In its [official statement of the incident](https://www.rbnz.govt.nz/news/2021/01/reserve-bank-response-to-illegal-breach-of-data-system), RBNZ said that the File Transfer Application (FTA) supplied by Accellion was illegally accessed. The RBNZ uses this application to store sensitive information. “We have been advised by the third-party provider that this wasn’t a specific attack on the Reserve Bank, and other users of the file sharing application were also compromised.” The RBNZ said in its statement. Details of the incident remain concealed at this time to protect investigation efforts. “We recognise the public interest in this incident however we are not in a position to provide further details at this time.” “Providing any further details at this early stage could adversely affect the investigation and the steps being taken to mitigate the breach. The Reserve Bank will continue to work with affected stakeholders directly.” The RBNZ has, however, disclosed that the compromised data may include some commercially and [personally sensitive information](https://www.upguard.com/blog/personally-identifiable-information-pii). The burgeoning prevalence of third-party attacks exposes a concerning vulnerability amongst vendor networks to data breaches. Because vendors require access to sensitive data to integrate with their partners, a single compromised vendor could result in multiple organizations suffering a data breach. The RBNZ disclosed that multiple parties were impacted by the Accellion data breach. “We have been advised by the third party provider that this wasn’t a specific attack on the Reserve Bank, and other users of the file sharing application were also compromised.” The ubiquitous [supply chain attack](https://www.upguard.com/blog/supply-chain-attack) against the U.S Government impacted up to 18,000 customers of the comprised vendor SolarWinds. This incident is the [second government entity](https://www.upguard.com/news/nt-government-third-party-breach) to fall victim to a third-party data breach this week. A possible prelude to the pervasiveness of third-party breaches in 2021, and a desperate call for organizations to strengthen the [security posture of their vendor network](https://www.upguard.com/product/vendorrisk). ## How secure is Accellion? Accellion operates the Kiteworks Private Data Network, a platform that unifies and secures sensitive data exchanges through email, file sharing, managed file transfer, secure forms, and APIs. The company provides encryption, access controls, and compliance management tools designed to help organizations protect confidential information and meet regulatory requirements across government and enterprise sectors. * View our free preliminary report on Accellion's security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View Accellion's score View score](/security-report/accellion) [https://accellion.com/](/security-report/accellion) ## Latest news Stay up-to-date with the latest news in cybersecurity. * ### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 20, 2026 * ### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 17, 2026 * ### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. UpGuard Team July 16, 2026 * ### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 [View all news](/news) ## Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.