New Zealand's Critical Infrastructure Faces Rising Cyber Threats

New Zealand's Cyber Security Strategy 2026-2030 highlights increasing cyber-attacks on critical infrastructure, with 80% of organizations lacking basic cyber hygiene. The National Cyber Security Centre reported a surge in malicious cyber events, disrupting over 473 million incidents in 2024/25. A modeled attack on Auckland's electricity system could cost over $1.6 billion, posing risks to public health and essential services. Historical incidents include the 2021 Waikato District Health Board ransomware attack affecting 400,000 people. The Strategy emphasizes the need for improved contracting practices to address cyber risks in infrastructure projects, as many systems are nearing end of life and vulnerable to exploitation.

Key Points: • 80% of organizations lack basic cyber hygiene for operational technology. • Over 473 million malicious cyber events were disrupted in 2024/25. • A modeled attack on Auckland's electricity could cost over $1.6 billion.