AI-Powered Cyberattacks Surge in New Zealand, Disrupting Businesses at Unprecedented Rates New Zealand businesses are facing a sharp rise in AI-driven cyber threats, with 80% of phishing emails now containing undetectable AI-generated content, according to Kordia’s 10th annual New Zealand Business Cyber Security Report. Over the past 12 months, 44% of large businesses experienced successful attacks, while 61% suffered severe disruptions including extortion in one in five cases. Emerging Threats and Vulnerabilities Cybercriminals are increasingly exploiting voice and video-based attacks, leveraging biometric data like facial recognition and voiceprints credentials that cannot be changed once compromised. Patrick Sharp, general manager of Kordia-owned Aura Information Security, warned that these methods prey on emotional manipulation, with AI-assisted phishing campaigns achieving a 54% click-through rate far higher than the 12% for traditional phishing. Global trends underscore the escalation: McKinsey reports a 1,200% increase in phishing attacks from 2022 to 2025, with organizations targeted every 39 seconds, resulting in daily economic losses of $18 million. Business Concerns and Response Gaps New Zealand’s business leaders ranked AI misuse among their top three cybersecurity priorities, with 24% expressing concern over its improper use. Smaller firms (50–99 employees) fear phishing and ransomware, while mid-sized companies (100–200 employees) worry about malicious insiders. Larger enterprises (201–500 employees) prioritize DDoS attacks, and those with over 500 employees view AI-generated threats as the biggest risk. Despite the risks, 50% of leaders admitted they would pay a ransom, and 8% did so in the past year. Yet, 25% of businesses remain unprepared, lacking data security measures, employee training, or incident response plans. A third of attacked businesses took two months to recover, while another third doubted their ability to survive a major breach. Regulatory and Insurance Challenges The report highlights New Zealand’s comparatively lenient penalties for privacy breaches capped at NZ$10,000 compared to Australia’s A$50 million fines. Calls are growing for stricter regulations, mandatory reporting, and government-backed cybersecurity education to align with global standards. Cyber insurance remains costly, with 17% of businesses filing claims in the past year. However, experts emphasize that insurance should not replace risk mitigation, as many firms absorb losses from data breaches, supply chain disruptions, and extortion. The global cybersecurity skills gap further complicates defenses, with only 14% of organizations employing adequate talent a deficit that has grown 8% since 2024.