CSIDB logo
Incident

@whaledump

Incident posture

Attack window
Aug 2014
Location
New Zealand
Status
Historical
CIA posture
Available to members
Updated
2026-09-04 00:43

Linked entities

Victim
@whaledump
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
Undetermined
Discovered
Undetermined
Disclosed
Aug 2014
Resolved
Pending

Summary

Hacker RawShark, operating under the alias @whaledump, gained access to the email account of conservative blogger Cameron Slater and released a series of messages that purportedly showed a coordinated effort to discredit government officials. The leaked correspondence implicated New Zealand Justice Minister Judith Collins in discussions about undermining political opponents and led to her resignation after being confronted by Prime Minister John Key. Additional emails revealed that financier Mark Hotchin had paid Slater and fellow blogger Cathy Odgers to produce articles attacking the Serious Fraud Office director and the Financial Markets Authority, while RawShark described himself as a teenage hacktivist motivated to expose what he viewed as improper collusion between politics and business.

Motives

Detailed motive labels are available to members.

3 motives

TTPs

Detailed technique labels are available to members.

2 techniques

Description

A hacker operating under the alias RawShark and the Twitter handle @whaledump gained unauthorized access to the email account of conservative blogger Cameron Slater. The breach allowed the attacker to extract private communications that were subsequently disclosed to the public. According to the book *Dirty Politics*, the leaked material suggested that New Zealand Prime Minister John Key had facilitated the transfer of a Security Intelligence Service document to Slater, whose WhaleOil blog was alleged to serve as a government‑directed smear platform. The extracted emails also revealed that financier Mark Hotchin had paid Slater and fellow blogger Cathy Odgers to produce articles targeting Serious Fraud Office director Adam Feeley and the Financial Markets Authority, which were investigating Hotchin’s business interests.

Cathy Odgers later forwarded a set of her own emails to the media company Fairfax, owner of Stuff.NZ, in an effort to implicate then‑Justice Minister Judith Collins in the alleged scheme. Collins responded to the allegations by describing them as “extremely distressing and disappointing,” and she resigned from her position after being confronted by Prime Minister John Key. The disclosed correspondence included a purported message from Collins commenting on Labour’s 2011 election prospects, a reply from Slater about awaiting an Official Information Act response, and Collins’s remark about “all this open government thingy.” The article noted that this new information from RawShark could prompt a high‑level inquiry into the unusually swift OIA request that had delivered intelligence to Slater.

RawShark has maintained strict anonymity, refusing to reveal any personal details or aliases and stating only that he considers himself a teenage hacktivist. He claimed that his distinctive motivations would make him easy to catch if he ever slipped up. The leak triggered political fallout, prompted ministerial resignations, and raised the prospect of a formal government investigation into the handling of the OIA request and the alleged misuse of intelligence information.

Sources

Sources available to members: 1 source.

CSIDB