Cyber recovery guidance

Been hacked in New Zealand? Find recovery help.

Clear first steps for hacked email, compromised accounts, websites and devices, with the aim of connecting people in New Zealand to appropriate local support.

Follow the recovery checklist
Choose your area

Regions in New Zealand

Choose an area, then a city, town or settlement. Taken means a support provider has been assigned; Available means a provider listing has not yet been allocated. Check the town page for service details and availability.

Start here

Protect the accounts that control the rest

If you suspect an account or device has been compromised, use a separate trusted device to coordinate recovery. Secure your main email and its recovery details first, then review important banking, website and business accounts. Remove unfamiliar sessions and strengthen multi-factor authentication where you can safely do so.

If money may be at risk, contact your bank using the number on your card or its official website. Keep payment references, login alerts, screenshots and original messages. Avoid deleting evidence or wiping a device before the recovery options have been reviewed.

Hacked email or account

Use the service provider’s official recovery process. Review recovery addresses, forwarding rules and active sessions after access is restored.

Website or domain affected

Identify who controls the registrar, DNS and hosting. Confirm backup access and who is responsible for restoring the site before making changes.

Business systems affected

Contact your existing IT provider using a trusted channel. Ask for urgent incident handling and confirm who can approve changes and recovery costs.

Recovery support across New Zealand

Our planned coverage includes Auckland, Wellington, Christchurch and communities throughout New Zealand. A country listing does not mean a technician is currently available in every town or island.

New Zealand spans more than one time zone. When local partners are added, their confirmed availability and the relevant local time will be shown on their pages.

When a provider is allocated, check their contact details and agreed support hours before calling. Do not send passwords, recovery codes or private incident information to Been Hacked Fix: any assessment should be arranged directly with your chosen provider.

New Zealand NCSC incident reporting. Reporting an incident is separate from appointing a recovery technician.