Cyber Incident Victim: RawShark
Date:
Aug 2014
Location:
New Zealand
Summary
A hacker known as RawShark breached the email account of a conservative blogger, revealing communications that implicated New Zealand's Justice Minister in a campaign to discredit government agencies investigating a financier. The leaked emails, which also suggested the Prime Minister facilitated the release of intelligence documents to the blogger, led to the minister's resignation amid allegations of misconduct. Further disclosures raised questions about potential misuse of official information processes and prompted calls for a high-level inquiry into the transparency of government communications. The hacker remained anonymous, claiming motivations that would lead to swift identification if operational security lapsed.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In August 2014, a hacker using the alias RawShark (@whaledump) infiltrated the email account of New Zealand conservative blogger Cameron Slater, operator of the WhaleOil blog. The breach exposed communications suggesting coordinated efforts by government figures to discredit officials and manipulate media narratives. Leaked emails implicated Justice Minister Judith Collins in discussions about undermining political opponents, including Labour Party member Phil Goff during the 2011 election cycle. Additional correspondence revealed controversial financier Mark Hotchin had allegedly paid Slater and fellow blogger Cathy Odgers to publish attacks against Adam Feeley, director of New Zealand's Serious Fraud Office, and the Financial Markets Authority during their investigations into Hotchin's company. Odgers independently released incriminating emails to Fairfax Media, which published allegations that Collins had communicated with Slater about targeting public servants. Prime Minister John Key confronted Collins over these claims, leading to her resignation on 30 August 2014. Collins publicly denounced the allegations as "extremely distressing and disappointing."
Further RawShark disclosures emerged via the New Zealand Herald on 1 September 2014, revealing specific email exchanges between Collins and Slater regarding an expedited Official Information Act (OIA) request. In one exchange, Collins mocked transparency protocols with the phrase "all this open government thingy," while Slater anticipated receiving intelligence documents through his OIA application. The messages suggested Collins contemplated forcing a parliamentary by-election by pressuring Goff to resign. These leaks prompted calls for a high-level inquiry into whether classified intelligence material had been improperly shared with Slater. RawShark maintained anonymity throughout the incident, describing himself only as a "teenage hacktivist" who would face rapid identification if operational security lapses occurred. The WhaleOil blog ceased regular operations following the disclosures, while the National Party government faced sustained scrutiny over ethical breaches detailed in Nicky Hager's book *Dirty Politics*, which cited RawShark's materials as evidence of systemic misconduct.