A hacker responsible for a string of data breaches impacting Australian organisations has turned their attention to a New Zealand real estate company.
Known only as 2019, the hacker posted details of a hack impacting New Zealand Sotheby’s International Realty on 18 August.
The compromised data includes customer details such as names, email addresses, and physical addresses, which is currently being offered for sale on an underground hacking forum.
New Zealand Sotheby’s International Realty (NZSIR) has confirmed it is investigating the claims and that it is linked to “data held within a third-party software platform that it uses”.
“The affected third-party software is a CRM system, designed to house limited contact information for marketing and operational purposes. Data points stored by NZSIR within the CRM, and which may have been accessed in this incident, include basic personal identifiers like names, addresses, phone numbers and email addresses,” an NZSIR spokesperson told Cyber Daily.
“No email exchanges, documentation or other substantive material relating to properties have been accessed. The platform is not used to store information used for customer financial transactions.”
NZSIR said that upon learning of the incident, the company took immediate steps to contain the breach. NZSIR engaged independent cyber security specialists, and a forensic investigation remains ongoing.
However, while the hacker claimed to have stolen a large amount of contact data, NZSIR believes otherwise.
“The threat actor is claiming to have obtained ‘1.6 million contacts’ – however NZSIR refutes this claim, as NZSIR does not have anywhere near that number of contacts on its database,” the spokesperson said.
NZSIR managing director Mark Harris told Cyber Daily he understands the trust placed in his firm, and regrets any concern it may cause its customers.
“Since becoming aware of the incident, our focus has been on containing the issue, understanding exactly what occurred, and working with independent cyber security specialists to protect client information,” Harris said.
“We remain committed to transparency and will continue to provide updates as deemed necessary.”
NZSIR said it has notified the National Cyber Security Centre and the Office of the Privacy Commissioner.
Who is 2019?
According to their forum profile, 2019 became active in January 2026 and has made a total of 38 posts, most of which refer to data breaches and other leaks.
Very little else is known about the hacker. They are, however, considered a trusted source of data on the forum in question.
The hacker’s recent Australian victims include BestPriceTravel Australia, Court Services Victoria, and LifeLine Australia. NZSIR appears to be their first victim in New Zealand.
Who is New Zealand Sotheby’s International Realty?
NZSIR is the New Zealand branch of Sotheby’s International Realty, and operates out of 27 locations across the country, in both the North and South Islands.
“Established in 1976, Sotheby’s International Realty has become the world’s leading premium residential real estate brokerage,” the company says on its website.
“Many people will also associate our name with its prestigious foundation brand, the centuries-old Sotheby’s auction house that is still going from strength to strength around the world.”
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.
