Data of about 76,000 people may have been leaked in a security breach of a cloud server used by media company NZME.
The company, whose portfolio includes The New Zealand Herald, said data may have been accessed through a third party cloud server holding information collected through competitions and some client data.
The information includes names, email addresses and phone numbers. The company said it did not include any credit card details.
Forensic experts are working with the company and the Privacy Commission has been briefed.
NZME chief executive Michael Boggs said the company was in the process of informing those affected.
He said it was doing everything it could to find out the extent of the breach and protect against future threats.