Think your company or personal login details are secure? Recent findings paint a worrying picture for New Zealanders. Paul Spain, Gorilla Technology’s CEO, joins Ryan Bridge on Herald Now, to break down just how exposed we all are – and what can actually be done about it.
A dark web deep dive by Kiwi cyber startup nWebbed uncovered nearly 200,000 active logins with passwords linked to New Zealand organisations available for sale right now on the dark web. A simple Gmail account is fetching only around $8, while a hacked social media login is worth up to $42. Passports, driver’s licenses and crypto accounts command even higher prices. If these sound like fire-sale figures, it’s not because your data is worthless – it’s because there’s so much of it out there, and it’s being bought in bulk by cybercriminals worldwide.
Paul stressed a truth that many businesses and individuals ignore at their peril: “your password, or one from someone in your organisation, is probably already on the dark web in some form.”
Password breaches happen constantly – and these stolen credentials are often automatically fired at a range of systems to break in.
So, what can Kiwi businesses and everyday users do? Paul recommends universal good practice for businesses and individuals alike:
• Never use the same password twice. Every login should have its own unique, robust password.
• Enable multi-factor authentication (MFA) wherever possible. Even with strong passwords, don’t skip this critical step – though, as Paul warns, there are still techniques that can bypass MFA, so it’s not foolproof on its own.
• Use a password manager. Storing them securely in a recognised manager (even one built into your device like on iPhone) is far better than trying to remember or reuse passwords.
• Regularly audit your cybersecurity. For businesses, this means ongoing cyber risk assessments, ideally with a proactive IT or cyber partner who really understands the evolving threat landscape.
Unfortunately, as Paul puts it, “Most of us aren’t consistent.” The urge to cut corners is always there, but given the stakes, it’s never been more important to act.
Ready to strengthen your cybersecurity foundations? Get in touch with the Gorilla Technology team for practical, strategic advice and tailored solutions to keep your business and personal information off the dark web.