More than half of New Zealand businesses experiencing cyber threats

More than half of New Zealand’s small to medium businesses have been exposed to a cyber threat, according to research commissioned by the National Cyber Security Centre’s (NCSC) and conducted by The Research Agency (TRA).

4 September 2025

“This year, 53% of New Zealand’s small to medium businesses told us they experienced a cyber threat in the past six months, significantly higher than the 36% reported in last year’s survey,” says Mike Jagusch, Director Mission Enablement, NCSC. 

“With cyber threats increasing in frequency and sophistication globally, New Zealand’s businesses need to anticipate a cyber security attack and plan accordingly to lessen the threat and be ready to respond.” 

However, while 94% of small businesses recognise that cyber security is important, many believe they are already doing enough to be cyber secure.  

“This perception by some businesses that they are already doing enough is preventing them from implementing some of the most important cyber security practices such as using two-factor authentication (2FA) and regularly backing up their data and files,” says Mr Jagusch.   

“2FA is a simple and effective way of adding an extra layer of protection to online accounts that can often prevent the majority of online attacks. 

“Of the businesses surveyed that experienced a cyber attack, over 50% of these attacks caused at least some impact on the business. 

“These include financial loss, time lost, impact to business operations and productivity, damaged reputation with customers or suppliers, or access to sensitive business information or businesses accounts,” Mr Jagusch says. 

Whatever your starting point is, Own Your Online has resources to begin your journey to protect your business online, as well as resources to make your next step.  

Own Your Online business resources External Link

Cyber Security Behaviour Tracker: small to medium enterprises