Cyber Incident Victim: National Institute of Water and Atmospheric Research
Date:
May 2014
Location:
New Zealand
Summary
The National Institute of Water and Atmospheric Research's supercomputer, FitzRoy, was reportedly compromised, leading to its temporary disconnection from the internet amid speculation of foreign state involvement, though conflicting accounts emerged regarding the validity and nature of the alleged intrusion. While initial reports suggested a breach attributed to a specific nation, subsequent statements introduced uncertainty, with no conclusive evidence confirming unauthorized access or data compromise; the system was restored to operational status, ensuring continuity of weather forecasting services.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In May 2014, reports emerged alleging a cybersecurity incident involving New Zealand’s National Institute of Water and Atmospheric Research (NIWA) and its FitzRoy supercomputer. Multiple news outlets described the system as compromised, though no specific details about the nature of the hack—such as attack vectors, data accessed, or malware used—were disclosed in available reporting. The 18-tonne supercomputer, noted as one of the most powerful in the Southern Hemisphere with computational capacity equivalent to 7,000 laptops, required specialized structural support for its operation. Following initial claims of a breach, NIWA disconnected FitzRoy from the internet amid speculation attributing the incident to a foreign state actor. Early media coverage, including a 3News article, directly implicated China in the intrusion, though subsequent revisions to the report inserted qualifiers like "probably" to reflect uncertainty. No official attribution or evidence supporting these claims was provided in the sourced material.
The incident’s scope and impact remained unclear due to conflicting accounts and a lack of confirmed technical details. While initial reports suggested a successful compromise, follow-up coverage raised doubts about whether any unauthorized access had actually occurred. Speculation arose that potential intruders might have abandoned the system upon encountering its specialized meteorological modeling environment rather than conventional consumer-grade infrastructure. NIWA restored FitzRoy’s internet connectivity after the investigation, ensuring continuity of weather forecasting services that relied on the supercomputer. No data breaches, operational disruptions beyond the temporary disconnection, or financial consequences were documented in the available sources. The absence of definitive conclusions from authorities or NIWA regarding the incident’s validity or origin left the event unresolved in public reporting.