How many "highly significant" cyber incidents did the National Cyber Security Centre respond to in the last financial year, and in how many reported incidents, if any, was the National Cyber Security Centre unable to provide a full response owing to capacity?

Answer

The NCSC publishes an annual cyber threat report - www.ncsc.govt.nz/resources/ncsc-annual-cyber-threat-reports/ - which includes identifying incidents by severity. Data for the 2025/2026 year to 30 June is currently being collated. Provisional assessment indicates there were four “highly significant” incidents in the 2025/2026 reporting year. GCSB does not publicly provide information on resource allocation or capacity as this information could provide an indication of capability or capacity in a particular area. Disclosure of such information could be prejudicial to national security.