Who can I tell if I encounter a cyber threat or risk?

If you spot a vulnerability or security flaw in a website, you can first report it to the organisation. They are generally happy to hear about a problem, so they can fix it.

However, you might prefer to report such cases to a trustworthy third party. CERT NZ(external link) is a newly-established government clearing-house for reports of computer security incidents. It also gives support and guidance on computer security and incidents and it can act as that trusted third party for you.

You can find out more about how CERT NZ communicates disclosures of vulnerabilities(external link) to the organisation or agency whose IT systems are affected.