Cyber Month 2025: Don’t Leave Cyber Resilience in the “Tomorrow Basket” 

Did you know Cyber Month has been running for 21 years? First launched by the US Department of Homeland Security and the National Cyber Security Alliance in 2004, it was designed to raise awareness of online safety. Yet, more than two decades later, many businesses and individuals are still leaving the basics of cyber protection in the “I’ll do it tomorrow” basket. 

This October, the national theme is “Building Our Cyber Safe Culture.” At IDCARE, Australia and New Zealand’s national scam, identity and cyber support service, we are reinforcing this message with our campaign “Cyber Resilience Isn’t a Tomorrow Job – Start Today.” Throughout the month, we’ll highlight simple, practical steps that businesses and individuals can take to strengthen their defences against cyber threats. 

Why Small Businesses Must Act Now 

Small businesses remain a prime target for cybercriminals, with devastating consequences: 

• Small businesses that reported to IDCARE in the past year experienced an average financial loss of $47,400 – enough to cripple many operations. 
• On average, they take 20% longer than individuals to respond to a cyber incident, giving criminals more time to cause damage. 
• Those who completed IDCARE’s free Cyber Health Check recorded an average score of just 34/100, revealing significant vulnerabilities. 
• 78% of small businesses that contacted IDCARE for help reported unauthorised access to their Facebook accounts, disrupting operations, reputation, and customer trust. 

Data Breaches Hurt More Than Just Business 

A data breach doesn’t just harm the business involved – it affects their customers, suppliers, and the wider community who rely on them. IDCARE’s data shows: 

• 74% of small businesses do not have a data breach response plan. 
• 47% of small business data breaches were the result of compromised email systems – many of which could have been prevented with multi-factor authentication. 

Free Help is Available 

Through its Small Business Cyber Resilience Service, funded by the Australian Government, IDCARE provides: 

• A free Cyber Health Check to measure cyber resilience and identify risks. 
• One-on-one consultations with cyber advisors offering tailored, practical guidance. 
• Access to cyber psychology support for those experiencing stress and emotional impacts from cybercrime. 
• Ongoing resources, tips, and action plans to lift cyber maturity. 

For Canberra builder Bruce Core, these services proved critical: 

“I’ve been building homes for over 40 years, but cyber wasn’t something I ever thought much about. The Cyber Health Check opened my eyes to the gaps in my business. A scam email came through not long after, and because of what I’d learnt, I picked up the phone instead of transferring the money. That one call probably saved me thousands.” 

Not Just About Business 

Cyber Month isn’t just for small businesses. Throughout October, IDCARE will also share weekly cyber tips for individuals – from enabling stronger authentication to understanding the importance of regular backups. 

IDCARE will also be joining webinars, panels and speaking opportunities across Australia, as well as sharing practical videos and advice on social media to help Australians build safer digital habits. 

A Call to Act Today 

Dr David Lacey, IDCARE’s Group CEO, said too many Australians leave cyber safety in the “tomorrow basket.” 

“Cybercrime isn’t slowing down, and the cost of inaction is enormous – financially and emotionally. Cyber Month is about building a culture of cyber safety and giving people and businesses the tools to act today. Small steps now could prevent devastating impacts later.” 

At the end of October, IDCARE will launch an interactive national map showing where across the country businesses and individuals have taken the step of securing their tomorrow by implementing a safety tip today.