Whangārei Slip Eases Access, Cyber Incident Unfolds

Key facts

• Russell Rd in Whangārei's Helena Bay closed by 110,000cu m slip on January 21.
• Approximately 800 homes in Helena Bay, Ōakura, Teal Bay, and Whangaruru affected by road closure.
• Convoy distance reduced by 3.5km from today to ease pressure on alternate Kaiikanui Rd.
• New convoy route expected to take 30 minutes, down from 33-44 minutes.
• Slip clearance is ongoing but remains below 50% completion.
• Whangārei-based electrical contractor McKay confirmed unauthorised access in January.
• McKay obtained an Auckland High Court injunction restricting data disclosure.
• Mnt6 group listed McKay on April 30; two other alleged victims are Canadian.

Access Eases for Cut-off Communities

Residents of Northland's Whangaruru Coast are set to experience improved access as improvements are made to the piloted convoy system. The main route, Russell Road in Helena Bay, was blocked by a significant 110,000 cubic metre slip on January 21. This closure has left approximately 800 homes in Helena Bay, Ōakura, Teal Bay, and Whangaruru reliant on the challenging Kaiikanui Road. The unsealed Kaiikanui Road necessitates pilot vehicles to escort drivers, with convoys meeting halfway. The Whangārei District Council, responsible for managing these daily convoys, announced a reduction in the convoy's length starting today. The escorted route will be shortened by 3.5 kilometres from the southern end. This adjustment aims to alleviate stress for residents living near the Kaiikanui Road and Pigs Head Road intersection, who will no longer need to wait for the convoy to pass. The change is also expected to reduce travel time for escorted journeys, aiming for a 30-minute duration compared to the current average of 33 to 44 minutes. Council officials noted that a more predictable schedule could improve operational efficiency.

Slip Clearance Continues Amidst Weather Delays

Despite the convoy improvements, the substantial slip that severed access to the Whangārei coast remains a significant ongoing challenge. Clearance operations are underway but have yet to reach the halfway point. Project lead Curt Martin of Censeo Consulting stated that progress is heavily influenced by weather conditions. Rainfall poses a dual threat: it makes the slip site too dangerous for work and hinders the proper compaction of removed material at the designated clean-fill site. Approximately 14 days have been lost to adverse weather since the clearance work commenced in late February. The council is actively seeking a suitable clean-fill site on the northeast side of the slip to expedite the process, though finding accessible, flood-free land presents difficulties. The Whangārei District Council is monitoring the convoy adjustments closely. Council manager of transportation Greg Monteith cautioned that the changes might be reversed if an increase in accidents occurs on the non-escorted sections of Kaiikanui Road. Motorists are reminded to adhere to a 30 km/h speed limit, keep to the left, and yield to the unescorted convoy.

Whangārei Contractor Confirms Cyber Breach

In parallel with the infrastructure challenges, a Whangārei-based electrical contractor, McKay, has confirmed it experienced unauthorised access to its systems in January. The company's name surfaced on a leak site operated by a group identifying as Mnt6 at the end of April. Mnt6 listed McKay alongside two other organisations, one of which is also based in Canada, and has identified a total of three alleged victims to date. McKay responded to the breach by obtaining an injunction from the High Court at Auckland. This court order restricts the disclosure of any data believed to have been compromised during the incident. The injunction aims to limit what can be publicly reported about the nature of the affected information while internal investigations and regulatory processes are ongoing. A spokesperson for McKay stated that the incident involved a single internal device and that the company immediately activated its cyber security response plan. The unauthorised access was isolated and contained, with IT systems reportedly continuing to operate securely, a claim independently verified by a third-party cyber security specialist. All affected customers and relevant individuals were notified, and the incident was reported to the Office of the Privacy Commissioner and the National Cyber Security Centre.

Mnt6 Operates as Data Broker, Court Order Limits Reporting

The motivations and structure of the Mnt6 group remain largely unclear, with its website offering limited details. However, one cyber security provider has assessed that Mnt6 likely functions as a data broker, deviating from traditional ransomware tactics. The group's listing of McKay on April 30 followed the company's detection of the incident in January. The Auckland High Court injunction obtained by McKay imposes significant limitations on reporting concerning the breach. This legal measure narrows the scope of information that can be disclosed about any compromised data, pending the conclusion of internal reviews and regulatory actions. McKay is collaborating with external specialists to enhance its network security and is actively monitoring for any further suspicious activity. McKay, headquartered in Whangārei, operates nine sites across New Zealand, offering a range of services in infrastructure, renewable energy, and marine projects. This includes street lighting, district-wide electrical work, and solar developments. An incident affecting a contractor of this scale could draw attention to supply chain vulnerabilities and the adequacy of cyber coverage for critical vendors.

Cyber Preparedness Gap in New Zealand

The McKay incident occurs at a time when research suggests a potential disconnect in cyber security strategy among New Zealand organisations. A survey of 714 security leaders across New Zealand and Australia revealed that only 30% of New Zealand companies have a formal business continuity or cyber incident response plan. Despite this apparent gap in structured planning, survey respondents expressed a high degree of confidence in their current security posture. Seventy-three percent of sufficient visibility into risks, vulnerabilities, and compliance. Furthermore, 78% believed they possessed the internal resources necessary to manage a cyberattack. This dichotomy between perceived technical capability and formalised planning could have implications for the duration and cost of potential future outages. The findings suggest a need for a more balanced approach, integrating robust detection mechanisms with comprehensive recovery and continuity strategies.

The bottom line

• Access to Whangārei's Whangaruru Coast is improving with a 3.5km reduction in the piloted convoy route.
• The slip that closed Russell Road on January 21 has seen less than 50% of its material cleared.
• Electrical contractor McKay confirmed a January cyber incident and has secured a court order limiting data disclosure.
• The group Mnt6, which listed McKay, is believed to operate as a data broker.
• New Zealand organisations show high confidence in cyber defences but a low rate of formal incident response planning.
• Weather delays continue to impact the pace of slip clearance operations.