Cyber Incident
New Zealand Customers
Last updated: 27 February 2026
Updated Trading Hours
Mon–Friday 11am – 10pm NZDT
Update on Direct Notifications
We are now in the process of directly notifying individuals in New Zealand whose personal information has been identified as potentially affected by the recent IT security incident.
If our review indicates that your information was involved, you will receive direct communication from us. This will include further details about the types of data involved, steps you can take to protect yourself, and information about the support available — including credit monitoring where applicable.
If you do not receive a notification, it means our investigation has determined that your information was not affected.
Important Information About How We Receive Data
- —youX does not collect personal information directly from consumers.
- —We receive information from the dealer, broker or lender you dealt with, who use our technology to facilitate your finance application or manage your finance agreement.
What Happened?
youX identified unauthorised access to its systems by a third party. Once identified, we acted immediately to contain the issue and commenced a detailed investigation with specialist external experts.
The threat actor subsequently published data online containing information it claimed to have taken from youX's systems. Following a thorough review, we confirmed that personal information was accessed and downloaded by the threat actor.
In accordance with our obligations under the New Zealand Privacy Act 2020, we have notified the Office of the Privacy Commissioner (New Zealand) and will continue to provide updates as required.
To take all reasonable steps to protect our stakeholders and their customers, we obtained an injunction from the Supreme Court of New South Wales prohibiting any access to, disclosure of, or dissemination of the impacted data by third parties.
Enhanced monitoring and additional security controls remain in place across our environment.
We understand this situation may be unsettling and sincerely apologise for any inconvenience or concern caused.
Further Information
For more detailed information, including what happened, what types of data may have been involved, how long information is retained, and what support is available, please refer to our full FAQs under the Cyber Incident Tab HERE.
If you require additional assistance, please complete the contact form and our team will be in touch.
Contact Our Team
Information on this page is current at the time of publication and may be updated as investigations continue.