Cybersecurity Awareness Month 2025: What It Means for Kiwi Small Businesses

Written By Jason Preston

October is Cybersecurity Awareness Month, and in 2025, the message is clearer than ever: cyber threats are rising, and small businesses in New Zealand are increasingly in the crosshairs.

According to the National Cyber Security Centre (NCSC), 53% of NZ small to medium businesses experienced a cyber threat in the past six months—a sharp increase from 36% last year. These threats range from phishing and invoice scams to impersonation and social engineering attacks, with many causing financial loss, operational disruption, and reputational damage.

🚨 Why Small Businesses Are Prime Targets

Small businesses often lack the resources of larger organisations, making them attractive to cybercriminals. Common vulnerabilities include:

  • Weak or reused passwords

  • Lack of multi-factor authentication (MFA)

  • Untrained staff falling for phishing scams

  • Outdated software and systems

And while many business owners believe they’re “doing enough,” the reality is that basic protections are still missing in many cases.

Cyber Smart Week: Get Involved Locally

New Zealand’s Cyber Smart Week runs from 6–12 October 2025, offering free resources, posters, quizzes, and social media packs to help businesses raise awareness and build resilience. It’s a great time to engage your team and review your current security posture.

Take the First Step

Cybersecurity doesn’t have to be overwhelming. Whether you're just starting out or looking to strengthen your defences, Business IT is here to help.

Jason Preston
Next

Protecting Your Business from AI-Powered Email Attacks with Sendmarc