22 July 2025
The National Cyber Security Centre’s Cyber Security Insights report for Q1 2025, released today, shows a 14.7% quarterly increase in financial loss reported by New Zealanders.
For the period from 1 January to 31 March 2025, a total of 1,369 incidents were reported to the NCSC in Q1. Of these, 77 incidents were triaged for specialist support because they were of potential national significance.
Financial losses of NZ$7.8 million were reported to the NCSC, compared with $6.8 million in the previous quarter.
“This is the second-highest quarterly total loss figure the NCSC has ever recorded," said the NCSC’s Response and Investigations Team Lead, Tom Roberts. “Many of these losses again came from scams and fraud, particularly through business email compromise – where an attacker targets the email systems of a business to obtain money or information – and unauthorised money transfers. This is consistent with what we saw in the previous quarter.”
Over half of the losses reported to the NCSC were to businesses. "We have seen that cyber criminals are often targeting organisations that manage large financial transactions, like law firms and real estate agencies," said Mr. Roberts.
“The true scale of losses is likely to be much greater, since we know only a small proportion of losses are reported to us. We urge people to be cautious online because bad actors are always waiting for an opportunity to steal money or information.”
“We encourage individuals and businesses to report incidents to us. Our staff have deep expertise in analysing cyber threats, and we can help people respond to and recover from incidents. The reports we receive also help us to gain a better picture of the current threat environment. This information shows us where we can best focus our efforts to protect New Zealanders online.”