Compass Communications

Compass Communications operates as atelecommunications provider with its headquarters located in New Zealand. The available sources do not specify the exact range of products or services offered by the company. No explicit details are provided regarding its size, subscriber count, or geographic reach beyond the location of its headquarters. The organisation's public profile is limited to its role as a telco based in New Zealand.

On 1 December 2024, Compass Communications confirmed that it had suffered a ransomware attack conducted by the RA World threat group. The attackers exfiltrated approximately 250 gigabytes of sensitive data, comprising financial records, customer information, human resources files, and project details, and subsequently released a sample of the stolen data as evidence of the breach. After detecting the incident, the company engaged external cybersecurity specialists and notified the appropriate authorities, acknowledging the potential exposure of customer information and committing to direct notifications for any affected individuals. RA World is known to employ a customised variant of the Babuk ransomware, to gain initial entry through misconfigured internet‑facing devices, and to conduct credential theft and lateral movement within compromised networks. Researchers have noted possible connections between RA World and the Chinese‑linked Bronze Starlight activity cluster, although the nature of any relationship remains unspecified in the cited source. The company’s response included cooperation with law enforcement and efforts to mitigate the impact of the data exposure.