Allied Intelligence — 2026-09-26

New Zealand NCSC Identifies China as Most Persistent State-Backed Cyber Threat Targeting Government and Critical Sectors

BLUFWellington's public naming of China as its top cyber threat aligns New Zealand with broader Five Eyes attribution norms and narrows diplomatic space for ambiguity across the South Pacific.

New Zealand's National Cyber Security Centre named China as the country's "most persistent and capable state actor" conducting cyber activity against New Zealand in its Cyber Threat Report 2025/26, released Thursday 12. The NCSC also linked suspected state-sponsored activity to Russia, Iran and North Korea 2. The agency reported 86 of 369 nationally significant cyber incidents in the year to June carried suspected links to state-backed actors, targeting government agencies, health and education organizations, and IT managed-service providers 2. Reuters reported the NCSC also flagged state-backed cyber espionage targeting governments and infrastructure across the South Pacific, a region where New Zealand has close family, cultural, political and economic ties 23.

Analysis
The explicit "most persistent and capable" label brings Wellington's public posture closer to Five Eyes attribution practices, and the concentration of state-linked incidents in government, health, education and managed-service providers points to Beijing-linked actors positioning for sustained access rather than opportunistic intrusion. Extending the warning to South Pacific governments and infrastructure signals New Zealand now treats its own regional partners as contested terrain for foreign pre-positioning. The framing may instead reflect Wellington's diplomatic alignment with Five Eyes partners' China posture rather than a sharp shift in the underlying threat picture; the assessment cannot rule out this reading since all three secondary accounts trace to a single wire report rather than independent corroboration. Wellington will likely face renewed pressure to tighten vetting and information-sharing standards with Canberra, Washington and London as the diplomatic rift with Beijing widens.
4 sources
  1. Cyber Threat Report 2025/26 - New Zealand National Cyber Security Centre (NCSC)
  2. New Zealand warns China is its most persistent state-backed cyber threat - The Jerusalem Post
  3. New Zealand says China is its most persistent state-backed cyber threat - Al-Monitor
  4. New Zealand Says China Is Its Most Persistent State-Backed Cyber Threat - U.S. News & World Report (Reuters)

View in full brief →

UNCLASSIFIED // OPEN SOURCE