Cyber attacks are rising. Is your business prepared?
Cyber threats are becoming a bigger concern for New Zealand businesses, with new research showing more businesses are experiencing attacks and feeling increasingly vulnerable.
The latest SME Cyber Security Behaviour Tracker from the National Cyber Security Centre (NCSC) found 43% of small to medium enterprises (SMEs) believe their business is vulnerable to a cyber attack, up from 34% a year ago. Among larger SMEs, concern is even higher, with more than half of businesses employing six or more staff saying they feel exposed to cyber risks.
2026 Cyber Security Behaviour Tracker(external link)
The research also found attacks are becoming more common for medium-sized businesses. More than three-quarters of organisations with 20 to 49 employees experienced a cyber threat or attack in the previous six months. Of those that were attacked, 44% said the impact was moderate to severe, including financial loss, damaged devices and stress.
One growing area of concern is the rise of AI-enabled cyber threats. Cyber criminals are increasingly using artificial intelligence to create convincing phishing emails, scams and impersonation attempts, making it harder for people to spot suspicious activity.
NCSC Acting Deputy Director-General Kevin Moar says while technology continues to evolve, the basics of cyber security remain one of the best defences.
"Keeping software up to date, using multi-factor authentication, backing up important data and making sure staff know how to recognise and respond to threats can significantly reduce an organisation's vulnerability."
People remain a critical line of defence, yet almost one in three businesses are still not providing cyber security training for staff.
The findings come ahead of Cyber Smart Week, running from 5 to 11 October 2026. This year we’re encouraging businesses to turn cyber awareness into practical action by strengthening everyday security habits and building staff confidence.
Businesses can take part by registering for a free Cyber Smart Week supporter toolkit, which includes resources designed to help organisations improve their cyber security practices and create a stronger security culture.