It was definitely deliberate just was it deliberately the staff member or had their credentials been compromised for that long?
I assume at this point other news outlets are triple checking their content if it's only the one that leans in my mind to it being the staff member because surely some of the other news outlets have people susceptible to phishing and if it was a Russian state sponsored hack they'd be hitting as many media outlets as possible.
Well, unless they think RNZ is state media (propaganda machine) the way Russian state media is.