Gun buyback data breach

The gun buyback data breach is claimed to have been limited to 66 gun dealers only potentially being able to access, and it has been blamed on the software supplier SAP, it is still embarrassing for the Police and the Government.

Stuff: ‘Disappointing’ data breach has police shut down gun buyback website

The details of more than 37,000 firearm owners, including the guns they possess and bank account information, were able to be accessed in the breach, according to the Council of Licensed Firearms Owners (Colfo).

The gun lobby group said it had received the data from a supporter and has released some images obtained in the breach, with personal details redacted.

At a press conference on Monday evening, Police Deputy Commissioner Mike Clement confirmed the data was available to a select group of gun dealers since November 27.

A gun dealer raised the alarm after finding they could access the data.

A gun dealer ‘raised the alarm’ by giving data to the gun lobby group? They should have gone to the police first and foremost if their main concern was the data breach. Some dealers have not been happy with the buyback scheme and the banning of semi-automatic weapons.

The breach occurred after an external software developer, German company SAP, updated the system in a way which hadn’t been authorised by police, Clement said.

He said police were working with SAP to determine how many people accessed the data.

He said he could not give an “ironclad” promise the data had not spread further.

“We will work pretty fast … to make sure that if there has been any any use of the information that we’re aware of it and we can go to those people,” he said.

He said prosecution was a possibility if the private information was distributed, but the images published by Colfo did not meet this threshold.

Newshub: Software giant SAP apologises to New Zealand as details of gun buyback data breach unfold

The police and the Government pointed the finger at German software giant SAP who are supplying the database infrastructure. Both said the contractor gave the wrong software permissions to a dealer.

SAP has apologised to New Zealand in a statement released Monday afternoon.

“As part of new features intended for the platform, security profiles were to be updated to allow certain users to be able to create citizens records,” a spokesperson explained.

“A new security profile was incorrectly provisioned to a group of 66 dealer users due to human error by SAP… We unreservedly apologise to New Zealand Police and the citizens of New Zealand for this error.”

The spokesperson said a full investigation is underway.

Human errors are always a potential for problems with data security – or any security. Nothing accessible by humans can be totally secure.

Initially it was suggested by the Council of Licensed Firearms Owners (COLFO) that the whole database was made publicly available, but both police and the Government are denying that was the case.

“My understanding is one firearms dealer contacted the police this morning and police immediately closed down the database,” the Police Minister said.

And humans with vested interests will try to take advantage of mistakes.

The Government has been plagued with a series of data breaches this year, from Treasury’s Budget botch-up to personal information of those signed up for Tuia 250 being posted online, as well as the possible breach of medical data of Tu Ora Compass Health patients.

Breaches will always be happening to varying degrees.  Breaches by Government departments seem to get the most attention, but of course they are not only ones.

RNZ interview (audio) – Gun buyback data breach: Privacy should not be an after thought

Government agencies and the police have been told to lift their game in protecting personal details after a breach in the gun buy back scheme allowed names and addresses to be viewed.

The police deputy commissioner, Mike Clement, has blamed third party German software company SAP for the breach. SAP has apologised for the error and says only 66 gun dealers would have had access to those personal details.

But as Jessie Chiang reports, privacy experts say that’s not good enough.

Breaches are always ‘not good enough’. but will keep happening.

Leave a comment

48 Comments

  1. Reply
    • Gezza

       /  3rd December 2019

      Well, it’s 10 minutes, & he covers several topics, including the Drew Report, not just this gun buyback register security ballsup.

      Jacinda needs to stop prefacing so many answers with “Um … ah …”. She does it all the time in that interview. It makes her sound like she’s inventing an excuse.

      “Mikey”, in his article:
      What it is, and what it will remain, is yet another cock-up from a government that reeks of amateurism, a government that makes a lot of noise but struggles to really deliver in an efficient, professional, & organised way.

      As Jacinda correctly points out, you can’t validly claim her Police Minister is somehow responsible for a private contractor’s mistake. But it does add to the general impression that, 2 years in, this government is still amateurish.

      And the way she answers some of his questions there, that so is she.

      Reply
      • Gezza

         /  3rd December 2019

        I’m a buck-stops-at-the-top kind of person, and David Seymour is calling for Stuart Nash’s resignation. This, remember though, is the Labour Party, Clare Curran had to sack herself, she was so embarrassed after Jacinda Ardern failed to.

        Iain Lees Galloway is still alive, inexplicably. And Phil Twyford, who set new records in ineptitude, got a new portfolio and retains power.

        So Stuart Nash, based on the Ardern record of being a leader, is as safe as houses. But the rest of us in the real world sadly can see what a cluster this is.

        He’s got an alternative future as a comedian, has “Mikey”. That Curran one’s a pearler ! 😀

        Reply
        • Corky

           /  3rd December 2019

          As stated previously… a national taonga. When he passes on he should be stuffed and displayed at Te Papa – Our Place, along with whatever top shelf European marque he was driving at the time.

          Has the Left a similar persona to Mikey? I can only think of Bomber and Johnny.

          Reply
          • Kitty Catkin

             /  3rd December 2019

            Many people would like Mike Hosking to get stuffed, I think.

            Reply
            • Kitty Catkin

               /  3rd December 2019

              Well, Corky said that he did…why downtick me for agreeing with the idea ?

  2. Maggy Wassilieff

     /  3rd December 2019

    Nicole McKee gives a very clear outline of the problem.
    https://www.rnz.co.nz/national/programmes/morningreport/audio/2018725120/council-of-licenced-firearms-owners-claims-members-saw-buyback-data
    At least 19 of her members also saw the information.

    Reply
    • Duker

       /  3rd December 2019

      ’19 of her members’ – those 19 were Gun dealers. There seems to be around 55 gun dealers who had ‘higher access’

      Reply
      • Maggy Wassilieff

         /  3rd December 2019

        Clearly you haven’t listened to the interview…Mckee states “a number of those were not dealers”

        Reply
        • Blazer

           /  3rd December 2019

          meaning about 2 of…them.

          Reply
        • Duker

           /  3rd December 2019

          Thats a lie on her part unless those individuals were employees who had access to dealer logins.

          Reply
          • Maggy Wassilieff

             /  3rd December 2019

            Hard to see why she would risk her reputation by lying on public radio.
            https://fss.nz/nicole-mckee/

            Reply
            • Duker

               /  3rd December 2019

              Sounded like a very cagey statement , with references to lawyers.
              Their website doesnt make any statement ‘in black and white’ on this matter .
              https://www.colfo.org.nz/news.html
              Its really a Gun dealers astro turfing group.

              For a so called responsible gun owners group , they sure have a lot of detailed instructions on what to do when the Police call. ..Responsible ..yeah right

  3. Gezza

     /  3rd December 2019

    What with prisoner escapes, getting multiple guns stolen from inside a police station, getting their own guns stolen from inside one of their own cars, getting their patrol cars stolen, having a police car do an ill-considered u-turn & cause a crash, & now this – our police are starting to look like the Keystone Cops.

    They’ve had a bad year. Has Mike Bush fronted on this yet?

    Reply
    • Corky

       /  3rd December 2019

      ”They’ve had a bad year. Has Mike Bush fronted on this yet?”

      No, he’s on a cultural diversity course at the moment.

      According to some dude on Mikey’s show – I believe it was the Police Association head – the police and public are involved in one firearm incident a day.

      Reply
    • Duker

       /  3rd December 2019

      Hes like the Treasury Secretary only has time for his leaving party.
      I think its time we got in hard nosed Aussie to run the Police and add a Civilian Oversight Board for the procedures and processes the Police do, as they claim ‘independence’ for every they do, yet fumble their vast bureaucracy. remember the too small stab vests, and wasnt there a problem with tasers

      Reply
    • Kitty Catkin

       /  3rd December 2019

      The Keystone Kops were spelt with a k.

      Reply
  4. lurcher1948

     /  3rd December 2019

    Gun owners are terrified of the data breach,I’m terrified of gun owners having read some of the scary posts on Facebooks Kiwi gun blog

    Reply
    • Corky

       /  3rd December 2019

      [Deleted – don’t make up names – PG] …I can hear your choppers chattering half way across the country.

      Reply
      • lurcher1948

         /  3rd December 2019

        Corky,to me gun owners are people with tiny reproductive organs,both male and females

        Reply
        • Corky

           /  3rd December 2019

          Gun owners to me are the salt of the earth. The last vestiges of expressing individual freedoms and responsibilities. In America that goes one step further with the right to self defence. That means if a feral like that British terrorist enters your home, you have the right to shoot him dead. You don’t have to use a fire extinguisher or your bare hands like those brave British folk did. Talking of tiny organs, do you realise you have probably been affected by your years of work as a printer?

          https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2078137/

          Reply
          • Corky

             /  3rd December 2019

            What that means is you may be suffering from Nuerotoxity.

            Reply
          • Duker

             /  3rd December 2019

            Every country more or less has the right to self defence, in home or public.

            US states vary on the Castle doctrine in the home business or vehicle, some say you have to retreat where possible, others say you have to establish intent of the intruder ( commit a felony) and not just blaze away with your gun. A few dont have any restrictions in your use of deadly force in those locations.
            The US supreme court has only fairly recently said there is a ‘basic right to possess a hand gun in the home… but its still subject to restrictions for criminals , mentally ill etc. Other states may allow wider rules about types of guns etc
            Its clear you dont really understand US gun laws which are still quite extensive restrictions in some states and fairly open slather in others, but not universal.

            Reply
            • Corky

               /  3rd December 2019

              ”Every country more or less has the right to self defence, in home or public.”

              In NZ you have no right to self defence.

            • Kitty Catkin

               /  3rd December 2019

              If you read the laws on this, you will find that one does, of course, have the right to self-defence in NZ if one is perceived to be in danger. If your idea was right, self-defence classes would be illegal and they are obviously not.

              Given the number of innocent people shot dead in the US, like the man who was in his own flat minding his own business, I am glad that we don’t have that sort of law here.

              Many people are killed by their families who hear them coming in late, think it’s a burglar and open fire.

              Do you regard gang members with sawn-off shotguns and people like Tarrant and David Grey as the salt of the earth ?

            • Corky

               /  3rd December 2019

              ”Its clear you don’t really understand US gun laws which are still quite extensive restrictions in some states and fairly open slather in others, but not universal.”

              Sometimes when I post, I take it for granted people have a general knowledge of the topic. Only a fool wouldn’t know each state has different gun laws…and even then, those laws are sometimes contested in court.
              As a generalisation, comparative to NZ, Americans can defend themselves with a gun…we can’t.

              Now someone has posted that NZers have the right to defend themselves. That is correct, but wrong. It’s in the statute books, but is not followed by police. You shoot someone, club them or stab them, you are going to court. No matter how cut and dry and correct the case is. Police will not tolerate what they call excessive force in defence of your life.

              We had a case in my area. Private party. Three mobsters turn up. They started assaulting party goers with broken bottles, batons and whatever they could lay their hands on. Some victims suffered horrific injuries. One managed to call the police. The mobster were caught.

              About three months later I was talking to a cop. I brought up this case. He seem reticent to answer any questions. So I posed a hypothetical similar case. I said If I had been there; fetched my gun and killed these three mobster, that would be self defence right? ”No,” was the reply. ‘That would be excessive force.’ ‘You didn’t give them the chance to stop or surrender.’ Oh, yeah..good luck with that.

              I remember the Northland farmer who shot a feral in defence of his property. He wound up in court, with his victim heckling him.

              So, it’s bullshit to think you can defend yourself. The NZ Police refuse to use discretion. You are heading for court.

      • lurcher1948

         /  3rd December 2019

        I have broad shoulders,PG having been a printer in another life,Corkys jibes are very low key to the give and take of previous times

        Reply
      • Corky

         /  3rd December 2019

        Pete’s got a sense of humour(?) [Deleted – don’t make up names – PG] 😊

        Reply
        • lurcher1948

           /  3rd December 2019

          DONT POKE THE BEAR ie PG,Corky,just saying,is it worth making a stand over what is nothing, enjoy life and the pleasure it gives you,im 71 in two days time and im proud to still run reasonably fast running my loves in agility, RED and JESS and TULLULAR our CHCH rescue, MERRY Christmas Corky,good health

          Reply
          • Corky

             /  3rd December 2019

            I’ll have to work on a new name for you, Lurchy. One that Pete will agree with.

            I will let you in on a secret. I still get crap from people I went to school with, whom I gave nicknames that have stuck for a life. I always become a little nervous when I run into Databoy and Jubo.

            As I’m not in the Xmas spirit yet, you will have to wait for a merry Xmas from me. Hell, I haven’t received a Xmas card yet.

            Reply
            • Kitty Catkin

               /  3rd December 2019

              Don’t tempt me to say it.

            • I’ve made it clear before not to use made up names for anyone here, nor for MPs or anyone. Some names my seem harmless (to the name caller), some may not care about being called different names, but:
              – if others see it being done they think there’s no problem with them doing it
              – it too easily escalates

              Civil discussion includes using names that people choose and use for themselves.

  5. lurcher1948

     /  3rd December 2019

    Tarrant was a legal gun owner and didn’t that end well for 51 dead people

    Reply
    • Duker

       /  3rd December 2019

      And news today, over last 4 years in Auckland alone 147 gun shot victims hospitalised.
      We cant just let it continue and believe the nonsense about ‘legal owners’ arent the problem. Legal owners includes too many people exploiting loopholes to supply the criminals

      Reply
      • alloytoo

         /  3rd December 2019

        147 is a bald statistic, it doesn’t tell us if it was in committing a criminal act, preventing a criminal act, or simply an accident.

        Doesn’t say how many firearms licence holders were involved and the class of their licence.

        Reply
        • Duker

           /  3rd December 2019

          It was a paywall
          Previous stories indicate a lot of shootings were gang related.
          Plenty of stories of registered owners selling guns to gangs …thats how they get them
          http://www.stuff.co.nz/waikato-times/news/767020/Collector-gets-jail-for-selling-guns
          https://www.rnz.co.nz/news/national/250617/man-jailed-for-selling-guns-to-gang
          ‘Judge Dawson said Edwards spent $50,000 on 72 guns and 67 of them came from the one shop, Gun City.’

          Once you have a license , whos counting how many guns you have . Gun City werent worried that one man bought 67 from them.

          Guns once they are imported and bought by a license holder , who knows what happens and thats how gangs are getting them

          Reply
          • Kitty Catkin

             /  3rd December 2019

            51 and the families they left behind them., Lurch, children who were unborn or infants when mum or dad was murdered, the parents of the murdered children like the three year old who ran laughing towards the funny man who then shot him…

            David Grey was probably a legal gun owner and the US mass murderers seem to be.

            A former neightbour had legal guns and kept them locked up, but the house was burgled and I would make a bet that the guns were stolen.

            Reply
            • Gezza

               /  3rd December 2019

              David Gray is the correct name of the perpetrator of the Aramoana Massacre, Kitty.

            • Kitty Catkin

               /  3rd December 2019

              My mistake, but that doesn’t make any difference to what he did.

          • Gezza

             /  3rd December 2019

            It was a paywall

            I read the whole Herald article after a Google query “147 gunshot Auckland” brought it up with a Pressreader link.

            Reply
            • Kitty Catkin

               /  3rd December 2019

              Slightly annoying format, but at least one can read it. Thank you for that.

              It said that these included accidents and self-harm, but not how many of each there were.

            • alloytoo

               /  4th December 2019

              Indeed there are no substantive stats in the article related to licence status of victims, legal status of weapons used etc. It’s a click bait headline. The conclusion you could tentatively grasp is that cracking down on gun activity may reduce these gross numbers.

            • Duker

               /  4th December 2019

              Australia found that reducing the supply of guns did reduce gun crime.
              The reality is more guns around now than ever before, the criminal use of guns is rising and the crims definitely get their guns by various means from the ‘lake of guns’ in legal gun owners hands.
              Do we wait till we are like the US and have multiple victim shootings as an every day occurrence and say ‘ not now the evidence isn’t clear yet’
              We have had very tight restrictions on hand guns for years…luckily . We didn’t wait for the evidence to be clear in that area.

            • Duker

               /  4th December 2019

              Australias buy back reduced guns by around 20%
              Murders and suicides plummeted
              “The average firearm suicide rate in Australia in the seven years after the bill declined by 57 percent compared with the seven years prior. The average firearm homicide rate went down by about 42 percent.”
              Probably they were declining anyway, but it was too dramatic a change to not to be an effect.
              He reality is zcess to guns kills people , we can see that in rural areas with both suicide and domestic violence .

              https://www.vox.com/2015/8/27/9212725/australia-buyback

            • Pink David

               /  5th December 2019

              “Murders and suicides plummeted”

              Murders and suicides were plummeting before the change in gun laws in Australia. They carried on falling at the same rate.

              The rate of murder in the US has been falling for decades, while the numbers of guns has skyrocketed.

  6. lurcher1948

     /  3rd December 2019

    JACINDA(PLEASE) ban ALL GUNS….only pest shooters to own guns,replace guns with fat labradors to keep them,the gun nuts fit, guns and fat labradors are both useless to New Zealanders

    Reply
  1. Gun buyback data breach — Your NZ – NZ Conservative Coalition

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s