New Zealand accounting firm TAS NZ Bay Limited hit by ransomware attack, data breach
Learn More
TAS NZ Bay Limited, an Auckland-based accounting firm, has been hit by a cyber attack claimed by the PEAR ransomware group. The firm was listed on the cybercriminal organization's dark web leak site in July 2025.
The attack resulted in the alleged theft of 365 gigabytes of highly sensitive business and client information. The PEAR group published sample data extracted from TAS NZ Bay Limited's systems, including scanned copies of account statements, business documents, and passport images
Unlike traditional ransomware operations that encrypt victim data and demand payment for decryption keys, PEAR focuses exclusively on data theft without encryption, using extortion tactics by threatening to publish stolen information unless ransom demands are met.
Exposed data includes:
- Financial records and accounting documents
- Business contracts and legal agreements
- Personally identifiable information (PII) records
- Partners', vendors', and clients' private data
- Email correspondence and communications
- Database contents and customer information
- Passport scans and identification documents
- Bank statements and account information
The number of affected individuals is not disclosed.
TAS NZ Bay Limited has not yet issued a public statement about the incident on their website or through other communication channels.
