There is a risk that the average NZ company sees itself as too small or too remote to be relevant to Hackers.  However remoteness is irrelevant on the net and any data obtained, no matter how benign it seems, may be useful to gather other information or authenticate a separate attack on your business or an attack on one of your customers or suppliers.