If you’ve ever heard of the dark web, you might picture something shady or complicated. In reality, it’s much simpler and more relevant to everyday New Zealanders than most people think.
In fact, your data could already be there without you knowing.
To understand the dark web, think of the internet like an iceberg. The part you use every day such as Google, shopping sites, and online banking is just the surface. Below that sits the “deep web,” which includes private systems like your email and banking accounts. The dark web sits even deeper. It’s a hidden part of the internet that requires special tools to access and keeps users anonymous. While the dark web isn’t illegal in New Zealand, criminals often use it to buy and sell stolen data.
So, how does someone end up on the dark web?
Most people don’t end up there because of something they did wrong. Instead, it happens when a service they use gets breached, a password gets reused, or someone falls for a phishing email. Once attackers steal that data, they collect it and sell it. This creates an underground market for personal and business information. That’s why modern scams feel so convincing. Attackers often use real names, emails, or leaked details to build trust. Check if your email has already been subjected to a data leak with HaveIBeenPwned?
What are the effects?
For Kiwi households, this can lead to identity theft, fraud, and targeted scams. For small businesses, the impact can be even greater. Attackers often target smaller organisations because they expect weaker security. One compromised account can cause financial loss, expose customer data, and damage your reputation.
For example, in late 2025, one of New Zealand’s largest privacy breaches occurred when hackers accessed sensitive health information stored on the privately operated patient portal Manage My Health. The attackers then demanded a ransom, threatening to publish the data on the dark web, potentially exposing the medical records of more than 120,000 New Zealanders.
How can you stay Cybersmart?
You don’t need to access the dark web to be affected by it. Instead, focus on reducing the chance of your data ending up there. You can use our resources to help you make sure your security is in tip-top shape.
Using a dedicated, all-in-one cybersecurity solution adds another layer of protection. It helps detect threats and block suspicious activity before it becomes a problem. For small businesses, it’s also important to train staff to recognise scams and limit access to sensitive data.
Cyber awareness plays a key role. That’s why Cybersmart Kiwis webinars help New Zealand households and small businesses build the knowledge they need to stay smart online.