Keith Ng followed a tip-off that parts of the Ministry of Social Development’s corporate network could be accessed from public computer kiosks in WINZ offices.
This looks like more than a systems failure.
Any organisation which has private information ought to have someone who ensures that it is kept private and can’t be accessed accidentally or deliberately by anyone not authorised to it.
Ng is a freelance journalist and spent almost a week uncovering this huge security lapse. If you want to support his work you can make a donation here.