{"id":256762,"date":"2026-01-29T00:51:10","date_gmt":"2026-01-29T00:51:10","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/256762\/"},"modified":"2026-01-29T00:51:10","modified_gmt":"2026-01-29T00:51:10","slug":"small-businesses-not-exempt-from-cyber-attacks-internet-watchdog-netsafe-says","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/256762\/","title":{"rendered":"Small businesses not exempt from cyber-attacks, internet watchdog Netsafe says"},"content":{"rendered":"

\u201cIt can happen in two ways, it can absolutely be targeted, somebody could decide that a particular entity is holding information that they want.\u201d<\/p>\n

Lyons said attacks also occurred when a hacker took a scatter-gun approach to try to find places that were vulnerable.<\/p>\n

\u201cThat might be sending out emails with fake invoices or attachments, it might be sending other messages, it might be getting them to click on pages on compromised websites.\u201d<\/p>\n

Lyons said once a hacker was in, their criminal intent took over.<\/p>\n

\u201cOnce they are in they will be trying to find out just about everything about that organisation and see what\u2019s of value in there, that they can take to either sell or exploit the original owners of that information to blackmail them into giving them money.\u201d<\/p>\n

He said it was often harder for small business to keep protected, as many bigger organisations had their own cyber-security departments.<\/p>\n

\u201cFor smaller businesses, it is being aware that these things can happen, that the data they store is of value to other people.<\/p>\n

\u201cSome people might think \u2018what could be the value, why could I be a target\u2019 but, like I said, people aren\u2019t always initially a target, but the information that is in there could be of value to somebody, and blackmailing organisations might be a good way for a criminal to make money,\u201d he said.<\/p>\n

\"Netsafe\u2019sNetsafe\u2019s chief online safety officer Sean Lyons<\/p>\n

The attack<\/a> came not long after the Law Society sent advice to its members on how to best manage such threats, and how to keep safe.<\/p>\n

Chief executive Katie Rusbatch said attacks were becoming more common.<\/p>\n

\u201cWe\u2019ve seen this on the rise recently and we have identified a need for some guidance and training in this particular area and that\u2019s been a focus for us.<\/p>\n

\u201cSo really in terms of the guidance that we\u2019ve shared, it\u2019s focusing on how these things like cyber attacks can happen, what those common threats to law firms are, whether that\u2019s things like email compromise or phishing … <\/p>\n

\u201cAnd then some also some guidance that law firms and lawyers can take to minimise the risk and create an environment for stronger security.<\/p>\n

\u201cSo providing some really practical guidance in that space so that lawyers can be prepared and also create a culture where they have an awareness of what those risks are.\u201d<\/p>\n

Practical steps available<\/p>\n

Rusbatch said there were simple things firms could do to keep safe.<\/p>\n

\u201cSo things like secure access and authentication, there is a lot talked about now about multi-factor authentication for things like emails, trust account systems that law firms might have, keeping systems up to date, so regularly applying software and security updates.<\/p>\n

\u201cTraining, testing your people, so really making sure that staff have an awareness of phishing and safe email practices and running through some tests in that regard so that people are able to see how they respond if there might be a phishing email.<\/p>\n

\u201cSo really creating awareness with your staff and then planning for incidents as well, if something does happen, making sure that you have an incident response plan that you know who to contact that who the cyber specialists are that you might need to contact.<\/p>\n

\u201cAnd then other things that backup and recover systems, making sure you have backups offline and the secure cloud and that sort of thing as well,\u201d she said.<\/p>\n

The Office of the Privacy Commissioner confirmed Langley Twigg Law had been in touch about the attack.<\/p>\n

\u201cWe will continue to work with them as they further investigate this incident, including ensuring they are aware of their legal obligations in relation to a privacy breach that either has caused or is likely to cause anyone serious harm.<\/p>\n

\u201cWe would expect Langley Twigg to provide any further detail they would want to share in relation to this,\u2019\u2019 a statement said.<\/p>\n

The police said they were also investigating.<\/p>\n

The attack came about a month after a major breach of patient health information portal ManageMyHealth<\/a>.<\/p>\n

The service connected patients with clinicians and allowed people to access their medical records.<\/p>\n","protected":false},"excerpt":{"rendered":"\u201cIt can happen in two ways, it can absolutely be targeted, somebody could decide that a particular entity…\n","protected":false},"author":2,"featured_media":256763,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[138,10166,72506,148079,148078,71,48153,359,18433,111,139,5006,69,312,4499,13026],"class_list":["post-256762","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-businesses","tag-cyberattacks","tag-delphine","tag-exempt","tag-from","tag-herbert","tag-internet","tag-netsafe","tag-new-zealand","tag-newzealand","tag-not","tag-nz","tag-says","tag-small","tag-watchdog"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/256762","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=256762"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/256762\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/256763"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=256762"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=256762"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=256762"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}