New Zealanders urged to act as NZD $1.6 billion lost to scams
The National Cyber Security Centre has launched a free digital tool designed to show New Zealanders the extent to which their online account details have been exposed.
According to figures released by the centre, over 4.3 million New Zealand account details are exposed or leaked online. The new tool, called 'How Exposed Am I', is available through the NCSC's Own Your Online platform and utilises data from the Have I Been Pwned service to help users understand if, and how, their information may have been compromised.
Exposure revealed
By entering an email address, users of 'How Exposed Am I' can see which personal information has been leaked in public data breaches, allowing them to assess their level of risk. The Have I Been Pwned database covers billions of data points collected from publicly available leaks dating back to 2007.
The true number of New Zealanders affected is likely higher, as the 4.3 million figure only includes accounts ending with .nz, and does not account for accounts with other domains (such as @gmail.com) belonging to New Zealand citizens.
Information exposed in breaches is accessible to cyber criminals, increasing the risk that affected individuals may be targeted by scams or other forms of online crime. The NCSC states that personal information harvested from such leaks is routinely used to compromise accounts.
Rising threats
Recent research cited by the NCSC indicates that more than half (54%) of New Zealanders experienced an online security threat within a six-month period. Despite this, only 42% feel personally vulnerable to such threats.
Financial losses resulting from online incidents are also considerable. It is estimated that New Zealanders lost NZD $1.6 billion in 2024 due to online security threats. Over 830,000 individuals reported financial loss, with the average amount lost per attack calculated at NZD $1,260. The emotional and practical impact was substantial, with 88% of affected individuals describing the consequences as moderate, significant or severe.
NCSC response
Mike Jagusch, Director of Mission Enablement at the NCSC, illustrates the scale of the challenge facing New Zealanders in protecting their digital identities.
"Almost everyone carries a digital footprint, and with it, a level of exposure to scammers. The real difference between being scammed, or not, lies in how effectively we protect ourselves. The latest statistics highlight the increasing prevalence of cyber crime and the urgent need for proactive measures. Even the simplest cyber security actions like two-factor authentication and long, unique passwords can significantly reduce exposure and risk of an attack. Two-factor authentication alone can help stop 99% of automated online attacks and long, unique passwords can take billions of years to crack."
The NCSC highlights two basic actions users can take to protect themselves: creating long, unique passwords and enabling two-factor authentication (2FA) on their most important accounts, such as banking, email, and social media profiles.
The Own Your Online campaign, under which the new tool has been launched, is an ongoing initiative by the NCSC to provide accessible, plain-language cyber security information to all New Zealanders, including small and medium-sized businesses. The campaign aims to raise understanding of cyber risks and encourage the public to take straightforward steps for personal and business security.
Early impact
According to the NCSC, early users of 'How Exposed Am I' have often been surprised by the extent of their personal information available online through leaked data. The service is designed to provide each individual with a 'hyper-personal' view of their exposure, showing how far their data has already travelled in the public domain.
The centre states that the tool is intended not only to raise personal awareness, but also to prompt practical action. By focusing on simple preventive steps, the NCSC aims to reduce the likelihood and impact of cyber incidents nationwide.
