Fiji’s Ministry of Policing and Communications says it is closely monitoring a reported cybersecurity incident involving a regional organisation based in Suva, after the United States Embassy issued a public statement about a suspected breach. The ministry’s position and comments from three senior ministers were reported by FBC News on 14 October 2026.
That FBC News report is the single source for every ministerial remark below. The full text of the US Embassy statement has not been published in the reporting available for this article, so the Embassy’s claim that Fiji was notified is characterised second-hand rather than quoted from the document itself.
Key facts
- The ministry said it had noted the US Embassy’s public statement on a suspected cybersecurity incident, and that authorities are assessing the reported threat.
- Prime Minister Sitiveni Rabuka says he has not been fully briefed, despite the Embassy’s claim that the Fiji Government had been notified.
- Rabuka pointed to a suspected attempt during the Pre-COP period; Fiji hosted the Pacific Pre-COP31 meeting in Nadi earlier this month.
- The affected organisation has not been named publicly, and no official has said what, if anything, was taken.
- China has rejected allegations linking it to the reported attack, and FBC News said the case has drawn comparisons to a 2024 breach involving the Pacific Islands Forum.
Why it matters
The sharpest line in the reporting is a ministerial one: Defence Minister Pio Tikoduadua told FBC News that cybercrime is a transnational organised crime that is “hitting Fiji badly”. Because Suva-based regional organisations run programmes on behalf of member governments across the Pacific, an intrusion at one is a regional exposure as much as a Fijian one — a reading of the sources rather than a claim made in them.
Foreign Affairs Minister Sakiasi Ditoka told FBC News that Fiji’s relations with its international partners are all intact, that the government values them and wants to strengthen that commitment, and that Fiji remains committed to working closely with partners on national and regional security concerns.
A gap between Suva and the US Embassy
Rabuka told FBC News the matter had not reached his office. “No, that has not been released to the Prime Minister’s office,” he said. That account sits against the United States Embassy’s statement about a breach at a Suva-based regional body, which FBC News reported included a claim that the Fiji Government had been notified. Asked whether the suspected attempt during the Pre-COP period had succeeded, Rabuka said he did not know.
What the ministry is asking for
Rather than confirming details of the incident, the Ministry of Policing and Communications has framed its response as a sector-wide warning. FBC News reported that the ministry is urging organisations to keep appropriate cybersecurity safeguards in place and to continuously monitor their networks while authorities assess the reported threat. The call covers government agencies, non-government organisations and private sector entities, and the government has restated its commitment to a safe and secure digital environment in Fiji and the wider Pacific.
Legislation and police powers
Tikoduadua told FBC News that work continues on ways of improving, particularly the legislation and the powers vested in the institution that deals with cybercrime, and that Fiji keeps working with international partners on the evolving threat posed by cybercriminals. He did not say when any legislative change would be brought forward.
Regional context: a disputed attribution
China’s rejection of any link to the reported attack comes weeks after Fiji’s request to Washington for evidence after the Zhao Fugang sanctions — the second matter this month in which Suva has had to weigh competing accounts from Beijing and Washington while its own agencies work out what happened. The comparison FBC News itself drew was with the 2024 Pacific Islands Forum breach, which it said highlighted ongoing concerns about the vulnerability of regional organisations to cyber threats.
What is still unknown
The reporting does not establish which organisation was hit, when the suspected intrusion occurred, whether it succeeded, or what data may have been exposed. It also carries no figures: no cost estimate, case count or tally of breached organisations sits behind Tikoduadua’s assessment, and no date has been attached either to the suspected attempt or to the government’s assessment of it.
Frequently Asked Questions
Which organisation was targeted?
It has not been named. Neither the Ministry of Policing and Communications nor any of the three ministers quoted by FBC News identified the Suva-based regional organisation, and the reporting does not say whether the government has been told which body it is.
Who is leading the investigation?
No lead agency has been named. Prime Minister Sitiveni Rabuka said the matter would be handled by the relevant authorities, and the ministry’s wording puts the case at the assessment stage — no findings, arrests or charges have been announced.
What is the 2024 Pacific Islands Forum case being compared to it?
FBC News drew that comparison itself, saying the earlier breach at the region’s main intergovernmental body highlighted ongoing concerns about the vulnerability of regional organisations. The report gives no detail of how the 2024 intrusion happened or how it was resolved, so the comparison is one of pattern rather than of established facts.
Has the government given a timeline for its assessment?
No. The reporting sets out no deadline or schedule for the assessment now under way, and no date by which the government expects to say more.
