'Indications of unusual activity' detected by DHB IT service