New Zealand Says China Is its Most Persistent State-Backed Cyber Threat

New Zealand's National Cyber Security Center (NCSC) has identified China as the country's most persistent and capable state-backed cyber threat, according to its annual Cyber Threat Report released on Thursday. The report, which covers the period from June 2025 to June 2026, reveals that 86 out of 369 cyber incidents of potential national significance had suspected links to state-sponsored actors. Among these, 86 incidents were attributed to Chinese state-backed actors.

The NCSC, part of New Zealand's intelligence community, has been tracking various foreign state actors, including China, Russia, Iran, and North Korea. However, China emerges as the most persistent and capable state actor in this context, targeting government agencies, health organizations, education institutions, and information technology companies.

The report warns that geopolitical competition is increasingly taking place in the South Pacific region, where New Zealand has close ties with several nations. Such cyber espionage activities could potentially impact citizens, businesses, and civic institutions in the country. State-backed actors often target organizations that operate critical infrastructure, provide essential public services, or hold sensitive information that could provide a strategic advantage.

Cyber espionage can be challenging to detect, as state-sponsored actors might engage in reconnaissance and gain access to systems over extended periods—sometimes years—before using the information for intelligence gathering or causing disruption. Long-running intrusions could lead to the compromise of operational technology and the loss of both corporate and personal data.