Cyber Incident

Important information for former staff of Kyocera New Zealand

Dear former Kyocera employees,

We are notifying you about a cyber incident that impacted Kyocera Document Solutions Australia Pty Ltd (Kyocera) which may impact you due to your previous employment with the organisation. In the information below, we’ll explain what has happened, the types of personal information that may have been involved in the incident and identify the steps you can take to help ensure your information is protected.

What has happened?

On 26 March 2025, Kyocera Document Solutions Australia Pty Ltd (Kyocera) became aware of suspicious activity on our network. Following this, we promptly launched an investigation to determine the nature and scope of the activity. In the course of these investigations, Kyocera discovered that it had been impacted by a cyber security incident.

Our investigation into the incident is now complete, and we have determined that the unauthorised third-party may have accessed personal information which we hold in relation to current and former staff due to their employment with the organisation. We have informed the New Zealand Office of the Privacy Commissioner of this incident.  

Since the incident, we have undertaken extensive remediation efforts and actions with assistance from our third-party experts to prevent reoccurrence. This has involved securing our networks and progressing work to safely restore our systems and operations. 

What personal information has been impacted?

Our investigation has identified that Kyocera’s Human Resources database, which contains information about former and current staff members, was accessed by the unauthorised third party.  While the information held on our HR database differs for each individual, the HR database includes the following kinds of information:

Full Name, Date of Birth, Residential Address, Contact Details (Phone Number, Email), Date of Employment, Employment Details (i.e. role, title and information related to the performance of your role), Leave Balance, Payslips, PAYG Withholding Payment Summaries, Bank Account Details (BSB and Account Number), IRD Number, Tax-related Information, Medical certificates, names and contact details of emergency contacts and their relationship to you.  

We have been unable to identify exactly what personal information about each individual within the database has been accessed, and we have no evidence to indicate that any personal information was taken from our systems.  There is also no evidence that your personal information held by Kyocera has been published externally.

What do I need to do now?

We know that an incident like this can be concerning and we make the following recommendations to mitigate against the risk of harm:

• If you have any questions about your IRD number or other tax-related information, we suggest you contact Inland Revenue.
• If you have any questions about financial information (such as your bank account details), we suggest you contact your financial institution using the contact details on their website or in the phone book.
• Remain alert to any suspicious emails and SMS or telephone communications that are disguised to look like they come from Kyocera or someone you know. 
• Verify communications by confirming the identity of the sender. This includes checking email names and domains, by hovering your mouse over the sender’s email address. 
• Do not open links that look suspicious. If you are unsure about a link sent to you by a company, you should go to the company’s website and look for the product or service that was offered. 
• Be alert to phishing scams. This could include scams that target you through post, phone or email. Phishing scams are attempts by scammers to trick people into providing their personal information, including passwords, credit card numbers and/or sensitive personal information. 
• Consider changing your email account passwords, including your online banking account passwords. Make sure you use strong passphrases that you do not use for other accounts. 
• Further information about online safety, cyber security and other helpful tips can be found at the Consumer Protection’s Scamwatch website and the New Zealand Cyber Security Centre website.  You can also access a free credit report to assess whether there has been suspicious activity against your credit history.

We understand that you may have further questions about this incident. If you do have any questions, please contact the HR team via hr@dau.kyocera.com who will respond to you as soon as possible. 

We sincerely apologise for any concern this incident has caused and want to reassure you that we take your privacy and the security of your data very seriously.

Sincerely,

Motohiro Sato
Managing Director