By LEAKRADAR
New Zealand engineering powerhouse McKay has reportedly suffered a catastrophic data breach, leading to the leak of highly sensitive government blueprints and internal infrastructure documentation
. McKay is a critical player in international engineering, with an annual revenue of approximately $135.8M. The firm serves as a strategic partner to the state, operating at the intersection of national defense, high-tech shipbuilding, and global energy sectors. As a key technological provider, McKay is responsible for the automation systems and “green” solutions powering much of the country’s critical infrastructure.
Critical Infrastructure in the Crosshairs
The leaked dataset, discovered by security researchers, appears to be a comprehensive exfiltration of McKay’s internal file servers. The most alarming discovery involves detailed documentation for Waikeria Prison, one of the largest and most complex correctional facility projects in recent history
. As the lead electrical contractor for the Waikeria expansion, McKay held sensitive technical data, including:
• Security Schematics: Detailed layouts of perimeter control systems and surveillance integration.
• Power Distribution: Documentation for the facility’s critical electrical grids and automated backup systems.
Beyond Government: Commercial Fallout
The breach’s scope extends far beyond state-run facilities. A deep dive into the leaked archives reveals a massive trove of documents belonging to numerous commercial projects across New Zealand.
The exposure includes proprietary industrial automation logic, electrical schematics for manufacturing plants, and private energy infrastructure. For the commercial sector, this represents a significant Intellectual Property (IP) theft, providing a potential roadmap for industrial espionage or future targeted ransomware attacks against McKay’s client base.
A “Supply Chain” Nightmare
This incident highlights the growing trend of threat actors targeting secondary contractors to gain “backdoor” access to national assets. When a firm integrated into national defense and the penitentiary system fails to secure its data, the risk transcends financial loss—it becomes a matter of national security.
The leaked files could theoretically allow bad actors to identify physical vulnerabilities in high-security environments or disrupt essential services. While McKay has built a reputation on innovative engineering, this breach serves as a stark reminder that digital defenses must be as reinforced as the physical structures they design.