Only 6% of NZ Small Businesses Have Cyber Insurance — Here's Why That Needs to Change

The NZ Small Business Cyber Protection Gap

The numbers are stark: 43% of all cybercrimes in New Zealand target small businesses, yet only 6% of small business owners have cyber insurance. This gap represents one of the most significant uninsured risks in the NZ economy.

Why Small Businesses Are Targeted

Many small business owners believe cybercriminals only target large corporations. The reality is the opposite — small businesses are attractive targets precisely because they typically have: fewer dedicated IT resources, weaker security controls, less sophisticated staff training, and valuable customer and financial data that can be exploited.

Cybercriminals often use automated tools to scan for vulnerable systems across thousands of businesses simultaneously. Being small provides no protection.

The Common Misconceptions

The low uptake of cyber insurance among NZ small businesses is driven by several misconceptions:

• "We're too small to be a target" — False. Size is irrelevant to automated attacks.
• "We have antivirus so we're protected" — Antivirus alone does not prevent modern attacks.
• "It's too expensive" — Policies start from around $40/month.
• "Our IT company handles security" — IT support is prevention; insurance covers what happens when prevention fails.
• "We could cover the cost ourselves" — The average breach costs $173,000 — most small businesses cannot self-insure this.

What Happens When an Uninsured Business Is Breached

Without cyber insurance, small businesses face the full cost of a cyber incident alone. This includes: forensic IT investigation ($15,000–$40,000), legal advice on Privacy Act obligations, notification of affected customers, reputational damage and customer loss, and any liability claims from affected parties. Many small NZ businesses have closed or permanently downsized following a significant cyber incident — not because of the attack itself, but because of the uninsured financial burden that followed.

How Cyber Insurance Protects Small Businesses

Cyber insurance gives small businesses access to resources they could never afford independently: a 24/7 incident response team, specialist forensic investigators, legal counsel, PR support and claims funding — all coordinated by experienced professionals. It transforms a potentially business-ending event into a manageable, recoverable situation.

The Cost of Inaction

At $40–$100/month, cyber insurance for a small NZ business is typically less than many businesses spend on coffee supplies. Weighed against a potential $173,000 average breach cost — or a worst-case scenario that closes the business — the case for cover is overwhelming.