MINISTRY OF BUSINESS,
INNOVATION & EMPLOYMENT
HiKINA WHAKATUTUKI
DOIA 1617-1427
17 July 2017
Tony Meyer
[email address]
Dear Mr Meyer
Thank you for your email of 19 May 2017, to the Ministry of Business, Innovation and Employment (the
Ministry) requesting the following information under the Official Information Act 1982 (the Act):
"a copy of all information received by CERT {NZ) regarding the "WannaCry''/"WannaCrypt"
worm/ransom ware outbreak that occured on the 12th of May 2017."
In my letter to you dated 31 May 2017, I advised you of the following three pieces of publically available
information used by CERT NZ to draw information relating to the "WannaCry" ransomware outbreak.
Information 'I
Date
I
Source/Location
1. FBI Flash
13 May 2017
Copy provided, but also available at: https://nhisac.org/wp-
Advisory on
content/uploads/2017 /05/FLASH_ WannaCry _FINAL.pdf
Wannacry
2. Fi delis
12 May 2017
Available publically at (free sign up required):
Barn cat
https://www.fidelissecurity.com/resources/fidelis-barncat
threatfeed
3.
Alien Vault
12 May 2017
Available at (free sign up required): https://otx.alienvault.com/
Open Threat
Exchange
We invited you to narrow the scope of your request due to its breadth and complexity, so we could
accurately assess the material for release without substantial amount of collation, assessment, and
consultation. As no further clarification of the request was received we have proceeded to assess your
request based on the original terms.
I have identified 1274 data records, documents and emails which contain information within the scope
of your request. As we noted in our previous letter, CERT NZ's work on threat identification involves
gathering information from a range of sources, including other national CERTs and high value
international security feeds to inform our reports of what's relevant to New Zealand.
This information is provided in confidence, under non-disclosure agreements or common information
sharing protocols such as the Traffic Light Protocol. The ability to receive and share information in this
way is essential to how we develop and provide advice.
PO Box 5488, Wellington 6011
New Zealand
Phone +64 4 901 1499
[email address]
