Posts

Posted on

Historic SDR and IND resources

Source: Tertiary Education Commission

Last updated 28 May 2025
Last updated 28 May 2025

Print

Share

This page contains key resources for Single Data Returns (SDRs) and Indicative Enrolment Collections (INDs) for prior periods.
This page contains key resources for Single Data Returns (SDRs) and Indicative Enrolment Collections (INDs) for prior periods.

Posted on

Tertiary Education – Open Polytechnic celebrates its graduates across the country

Source: Open Polytechnic

Around 1150 graduates from throughout Aotearoa New Zealand received their diplomas and degrees from the Open Polytechnic, the nation’s specialist provider of online learning either at graduation ceremonies in Auckland, Wellington and Christchurch, or in absentia, in May 2025.
Four years ago, during the COVID-19 restrictions, Wellington graduate speaker Sarah Beets, from Upper Hutt, was unsure about what she was going to do for a job in the future.
It was during this time that Sarah became aware of the mental health challenges facing New Zealanders and the pressure being placed on the mental health system.
“These reports compelled me to explore a career in this field, and fortunately, Open Polytechnic offered my desired qualification with the benefit of flexibility,” Sarah said.
She enrolled in the Bachelor of Applied Science (Psychology) in the midst of a big overseas family move.
“Being able to study part-time via distance, online on my own schedule, was invaluable to my success,” Sarah said.
“I was able to study on the other side of the world. I wrote essays in hotels rooms, I did my readings anywhere and everywhere, beside the lake, on the plane, in cafes.”
A defining moment for Sarah was during her second year of study while completing the Psychology of Grief course.
One of the assignments required Sarah to interview someone about their experience with grief. Her good friend agreed to share her story with Sarah.
“It was during this interview, while listening to my friend’s journey, that I knew I was on the right track. My studies had enhanced my knowledge and were continuously igniting my passion for the path that I was on,” Sarah said.
With her Bachelor of Applied Science (Psychology) degree under her belt, Sarah is now a step closer to achieving her ultimate goal of becoming a clinical psychologist.
“I have learnt much about the complexities of the human mind, I have learnt about why humans may behave the way they do, and I have learnt about how individuals consider their place in our social world,” she said.
During her graduation address, Sarah thanked Open Polytechnic staff and her family and encouraged other graduates. “To those who have graduated today – today is the beginning,” Sarah said.
“Let us move forward with the knowledge we have gained and resilience we have cultivated.”
“Whether you’re embarking on a new career, further studies, or are on an entirely new path – I encourage you to keep your curiosity alive and to remember that you can do hard things.”
Bachelor of Social Work graduate Jasmine Bishop was the student speaker at the Auckland ceremony.
Jasmine spoke about her time studying over the last five years and how much has changed, noting that her child was eight months old when she started, and is now a six-year-old school student.
Among the Auckland graduates were Pasifika sisters Vanessa (28), Serena (26) and Alyssa Tatupu (25).
They had never planned to do any tertiary education, but when the option to earn a New Zealand Diploma in Funeral Directing (Level 5) at Open Polytechnic came up, “it was an opportunity they couldn’t pass up”.
The trio, based in Manukau City, all work as funeral directors for Ese Tatupu Funeral Directors & Mortuary Embalmers under the guidance of their father Ese Tatupu, who is also a funeral director.
Bachelor of Teaching in Early Childhood Education graduate, Tessa Karati was the student speaker at the Christchurch ceremony.
During her speech, Tessa who identifies as Cook Island and New Zealand Māori, acknowledged the impact that studying with Open Polytechnic has had on her life.
“I thank Open Polytechnic, for sensitively, but boldly calling us up and out to be advocates, and for helping to shape not just who I am as a teacher, but who I am as a person,” she said.
She likened her learner journey to a “relationship” with her degree as she went through the five stages of attraction, romance, disillusionment, commitment and acceptance.
Executive Director of Open Polytechnic Alan Cadwallader congratulated this year’s graduates for their commitment to completing their studies, while often juggling work and family commitments.
“We are delighted to be able to celebrate our graduates’ academic achievements at our ceremonies across the country,” Alan said.
Alan acknowledged the support of friends, family, whānau and supporters who have helped all Open Polytechnic graduates throughout their study journeys.
“It’s your practical means of support, your words of encouragement, and your guidance throughout your graduate’s study journey that has also contributed to their success,” Alan said.
Ākonga (learners) graduated with a variety of diplomas and degrees, including early childhood education, primary and secondary education, business, applied management, funeral directing, legal executive studies, library and information studies, human resources, marketing, psychology, applied science, social health and wellbeing, web development and design, information technology, construction, architectural technology, engineering technology, and social work.
About Open Polytechnic
Open Polytechnic is New Zealand’s largest specialist provider of open and distance learning; Open Polytechnic enrols over 35,000 mainly part-time learners per year. The majority of learners are adult learners, combining work and study.
Posted on

UNICEF – ‘Unimaginable horrors’: more than 50,000 children reportedly killed or injured in the Gaza Strip

Source: UNICEF

AMMAN, 27 May 2025 – Statement by UNICEF Regional Director for the Middle East and North Africa, Edouard Beigbeder

“In a 72-hour period this weekend, images from two horrific attacks provide yet more evidence of the unconscionable cost of this ruthless war on children in the Gaza Strip.

“On Friday, we saw videos of the bodies of burnt, dismembered children from the al-Najjar family being pulled from the rubble of their home in Khan Younis. Of 10 siblings under 12 years old, only one reportedly survived, with critical injuries.

“Early Monday, we saw images of a small child trapped in a burning school in Gaza City. That attack, in the early hours of the morning, reportedly killed at least 31 people, including 18 children.

“These children – lives that should never be reduced to numbers – are now part of a long, harrowing list of unimaginable horrors: the grave violations against children, the blockade of aid, the starvation, the constant forced displacement, and the destruction of hospitals, water systems, schools, and homes. In essence, the destruction of life itself in the Gaza Strip.

“Since the end of the ceasefire on 18 March, 1,309 children have reportedly been killed and 3,738 injured. In total, more than 50,000 children have reportedly been killed or injured since October 2023. How many more dead girls and boys will it take? What level of horror must be livestreamed before the international community fully steps up, uses its influence, and takes bold, decisive action to force the end of this ruthless killing of children?

“UNICEF is once again urging all parties to the conflict to end the violence, protect civilians, including children, respect international humanitarian law and human rights law, allow the immediate provision of humanitarian aid, and release all hostages.

“The children of Gaza need protection. They need food, water, and medicine. They need a ceasefire. But more than anything, they need immediate, collective action to stop this once and for all.”
 
About UNICEF
 
UNICEF, the United Nations agency for children, works to protect the rights of every child, everywhere, especially the most disadvantaged children and in the toughest places to reach. Across more than 190 countries and territories, we do whatever it takes to help children survive, thrive, and fulfil their potential. 
For more information about UNICEF and its work, please visit: www.unicef.org
Follow UNICEF on X (Twitter), Facebook, Instagram, and YouTube

Posted on

Ukraine: Air raid sirens halted one in every five lessons this school year – Save the Children

Source: Save the Children

Air raid sirens forced children in Ukraine to miss an average of one in every five school lessons during the past academic year that ends this week with pupils preparing the third consecutive summer under war, Save the Children said. 
In some regions, pupils missed over half of their classes during the 2024-2025 academic year due to air raid sirens, according to a Save the Children analysis of publicly available data [2] about the frequency of air raid alerts and impact on education from 2 September 2024 to 11 May 2025. 
Save the Children’s analysis, using methodology developed this year, [2] found if students had five lessons in a typical day, on average they would miss one due to air raid sirens. This sustained disruption is putting an entire generation’s learning and development at risk, and chipping away at children’s mental wellbeing. 
The most significant disruptions to the education process occurred in the northern and central regions of Ukraine – those closest to the frontline of fighting. Children in the Sumy region were the most impacted, missing an estimated 85% of all scheduled lessons, equivalent to about 700 out of 830 lessons. Kharkiv and Donetsk regions had visibly higher losses than most other regions, with students missing over two thirds of lessons over the year. 
For the Zaporizhzhia and Dnipropetrovsk regions, territories located near active hostilities, students missed out on over 40% of lessons. The analysis is released in the same week as the 10th anniversary of the Safe Schools Declaration , [1] the inter-governmental political commitment to protect schools, students and teachers during armed conflict. It is based on methodology developed by the Center for Education in Emergencies Research as part of the 2024-2026 Multi-Year Resilience Programme (MYRP Ukraine), funded by the global fund Education Cannot Wait. 
Across Ukraine, children live in constant fear of potential attacks that frequently keep them home from school, as air raid sirens often start in the morning and persist throughout the school day. Since February 2022, more than 4,000 educational institutions have been damaged or destroyed, including 229 schools, 110 kindergartens, and 97 universities. Air raid sirens in Ukraine are only activated in case of a real threat or emergency. 
When a siren sounds, teachers must immediately stop the lesson and escort children to a shelter. Classes can only resume if the shelter is properly equipped as a temporary learning space which is rarely the case. Even in schools operating online due to security concerns or a lack of shelters, lessons are interrupted as children must still seek shelter during alerts. 
Students must remain in a safe place until the threat has passed. With the escalation of conflict coming just a year after schools re-opened following the COVID-19 pandemic, the toll of lost learning has been immense. UNESCO data shows that schools in Ukraine were fully closed for 125 learning days [3] during the pandemic and partially closed for a further 95. 
A quarter of children – 24% – are still restricted to online learning only, due to lack of shelters in schools and other security issues. 
Halyna-, a mother and a teacher from Mykolaiv, who teaches in person, said: 
“Our children have been through such a distressing experience. They constantly read news channels, they understand what ballistics are, how missiles are launched, their potential trajectory, and the different types of explosions. They know what it means when a missile is launched and when it hits. They understand all of it. But understanding doesn’t take away the fear. The psychological stress they’re under is immense.”
Sonia Khush, Country Director for Save the Children in Ukraine, said: 
“Children in Ukraine, especially those who live in the East and near the frontline, are under constant stress because of air raid sirens both day and night. “Due to bombs and drones, school is no longer a safe space. All parties to the conflict must protect education – schools, kindergartens, universities – in line with the commitments of the Safe Schools Declaration. While Ukraine has been forced to get used to a new normal, children’s rights must be guaranteed. We call on the international community, governments, and all parties to the conflict to ensure the safety of schools and uphold children’s right to learn in peace”. 
May 2025 marks the 10th anniversary of the Safe Schools Declaration. A total of 121 states have committed to taking concrete steps to prevent attacks on education, avoid the use of schools for military purposes, and safeguard the right to learn even in times of crisis. 
As the Declaration states, ” Every boy and girl have the right to an education without fear of violence or attack. Every school should be a protected space for students to learn, and fulfill their potential, even during war.” 
Save the Children has been working in Ukraine since 2014. Since 24 February 2022, the children’s rights agency has dramatically scaled up its operations and now has a team of 250 staff based in Kyiv, Kharkiv, Mykolaiv, Dnipro, Donetsk and Chernivtsi. Working with more than 25 partners, the organisation has provided essential support and reached more than 3.44 million people, including around 1.4 million children.
[1] In November 2019, Ukraine became the 100th country to endorse the Safe Schools Declaration.
[2] Save the Children broadly followed the methodology adopted in this Center of Excellence of Education study to estimate lessons lost due to air raid alerts that occurred on school days and during school hours, using a publicly accessible database of air raid alerts available here. Only oblast level alerts were considered. Since the length of the school day and the number and length of lessons varies by grade, we took averages to work out estimates across school children of all ages. Given that an alert is likely to lead to learning disruption longer than just the length of the alert, following Vox Ukraine’s methodology, we considered any alert in secondary school of between 5 and 59 minutes as leading to the loss of an entire lesson, while for primary students a lesson was considered lost as a result of any alert lasting between 5 and 54 minutes since primary school lessons are shorter. School holidays vary between schools; however, we followed announcements in local news articles to guide identification of holiday days which with weekends and public holidays were not counted in the calculations.
[3] Excluding holidays  
Posted on

Transport – Poor roads and ferry delays a major risk to safety and the economy

Source: Ia Ara Aotearoa Transporting New Zealand

The road freight industry is warning the poor state of New Zealand’s roads are having a serious impact on the safety of road users.
And there are major concerns delays over replacements for the Interislander Cook Strait ferries could have a big negative flow-on effect for the economy.
Billy Clemens, the Policy and Advocacy Head at Transporting New Zealand, says the vast majority (93 per cent) of respondents in the 2025 National Road Freight Industry Survey agreed poor road maintenance is putting truck drivers and other road users at risk.
As well, a significant number (84 per cent), believed that regional roads and bridges are neglected, and that delays in replacing the Cook Strait ferries pose a major risk (79 per cent). (The survey was done before the announcement that the Aratere is to be retired in August.)
The 2025 National Road Freight Industry Survey of nearly 200 road freight businesses was conducted in March this year by Research NZ on behalf of advocacy group Transporting New Zealand. The survey was also supported by the New Zealand Heavy Haulage Association and Groundspread NZ. It represents the most extensive industry snapshot in over a decade.
“The survey painted a gloomy financial picture for business – only 34 per cent of those surveyed expected their financial situation to improve over the next 12 months, and only one in four respondents reported having sustainable operating margins,” Clemens says.
Health, safety and wellbeing are big concerns for the industry, with 78 per cent of respondents calling for more purpose-designed rest stops for drivers, and 72 per cent saying it was important for drivers to have a good work-life balance.
About Ia Ara Aotearoa Transporting New Zealand
Ia Ara Aotearoa Transporting New Zealand is the peak national membership association representing the road freight transport industry. Our members operate urban, rural and inter- regional commercial freight transport services throughout the country.
Road is the dominant freight mode in New Zealand, transporting 92.8% of the freight task on a tonnage basis, and 75.1% on a tonne-km basis. The road freight transport industry employs over 34,000 people across more than 4700 businesses, with an annual turnover of $6 billion.
Posted on

World Vision – More than 60 landmarks in 22 locations across Aotearoa to light up orange for World Vision 40 Hour Challenge

Source: World Vision

An orange glow will light up across Aotearoa on the evening of 13 June, as 63 iconic Kiwi landmarks show their support for the World Vision 40 Hour Challenge, the nation’s largest youth fundraising event.

This is the fifth year that a multitude of New Zealand’s most recognisable monuments will shine orange to raise awareness for the fundraising campaign, which helps to make a life-changing difference to children around the world.  
 
This year’s World Vision 40 Hour Challenge is encouraging rangatahi to give up technology and go “offline for 40 Hours” to unplug, disconnect, and get together with their friends and whānau while completing a challenge to raise funds for children who struggle to get enough to eat each day due to climate change in Solomon Islands.  
 
World Vision Associate National Director, TJ Grant, says young people today live very “online” lives and that means going offline for 40 hours is the ultimate challenge.

He says World Vision New Zealand surveyed participants who did the World Vision 40 Hour Challenge last year and half of the survey participants said a “no tech” challenge would be the most difficult challenge for them.
 
Some of the key monuments lighting up in Auckland during the World Vision 40 Hour Challenge Weekend (13-15 June) include Eden Park, Spark Arena, Vero Centre, Sylvia Park, and Mānawa Bay Premium Outlet Centre.  
 
Other key monuments lighting up across Aotearoa, include Christchurch Airport, Forsyth Barr Stadium in Dunedin, The Michael Fowler Centre in Wellington, The Botanical Gardens in Christchurch, the Saxton Oval Pavilion in Nelson, and Queens Park in Invercargill.  
 
Unique and iconic landmarks lighting up orange this year include the tunnel at Wellington Cable Cars, the Big Carrot in Ohakune, the Big Fruit in Cromwell, the KZ1 boat at Auckland’s Maritime Museum, and the corrugated iron Sheepdog in Tirau.
 
Grant says he’s overwhelmed at the number of landmarks supporting this year’s World Vision 40 Hour Challenge.  
 
“The challenge young Kiwis are taking on during the campaign weekend will help to raise funds that will feed families in Solomon Islands who are on the frontlines of climate change.  Funds will give families tools and seeds to farm climate-smart crops, plant mangroves to protect their land from rising sea levels and restore fish populations and provide sustainable food sources for future generations to ensure children can grow up healthy and strong in a changing climate.”
 
Owner of Vero Centre, Kiwi Property, says, “We are proud to support World Vision’s 40 Hour  Challenge by illuminating the iconic Vero Centre halo in orange this June, helping to raise awareness for this important cause.”
 
The World Vision 40 Hour Challenge takes place from June 13 – June 15.Sign up to take part in this year’s World Vision 40 Hour Challenge, or donate, at: 40hour.org.nz  
 
The full list of landmarks lighting up orange on 13-15 June includes:

Arrowtown: Lakes District Museum & Gallery
 
Ashburton: Clocktower

Auckland: Eden Park, Spark Arena, Maritime Museum KZ1 boat, PWC Tower, Vero Centre, The Aotea Centre, Sylvia Park, Dominion Road, St. Peters Church (Onehunga), and Mānawa Bay Premium Outlet Centre

Christchurch: Christchurch Airport, The Botanical Gardens, The Bridge of Remembrance, New Brighton Pier, Captain Scott Plaza, The Bowker Fountain (Victoria Square), Vaka a Hina, Memorial Gateway Bridge, Christchurch Town Hall Ferrier Fountain, Fanfare Sculpture, Christchurch Art Gallery Te Puna o Waiwhetū 

Cromwell: Big Fruit

Dunedin: Forsyth Barr Stadium, Dunedin Airport, Golden Centre Mall (digital screens), Tuhura Otago Museum, Wall Street Mall, Otago Boys High School

Gisborne: Gisborne Clock Tower
 
Invercargill: Queens Park (Feldwich Gates, Band Rotunda, and Gala Street Fountain)

Napier: The Gold of the Kowhai Sculpture and Tom Parker Fountain

Nelson: Saxton Oval Pavilion

New Plymouth: New Plymouth Clock Tower  

Oamaru: Oamaru Opera House  

Ohakune: Big Carrot  

Palmerston North: Hopwood Clock Tower

Tauranga: Wharf Street Lights, Beacon Wharf, Masonic Park, Waterfront- North and playground, Tunks Reserve
 
Te Aroha: Clock Tower  

Tirau: The Big Sheep Dog

Waitaki: Craig Fountain  

Waitoma: Tree of Light  

Wellington: Michael Fowler Centre, Wellington Cable Car tunnel, Wellington Airport, Kelburn Park Fountain, Hikitia, Nga Kina sculpture and Promenades, Queens Wharf sails shades

Whanganui: Royal Whanganui Opera House (Whanganui), War Memorial Centre

Whangarei: Whangarei Airport, Victoria Canopy Bridge, Kotuitui Whitinga  

Posted on

Tertiary Education – International data science joint programme established on foundation of people-to-people exchange

Source: Unitec

Unitec and Hebei University of Engineering (HUE) are launching a joint degree programme in Data Science and Big Data Technology to begin delivery in September this year.
The degree gives learners the opportunity to complete the first three years of the programme in Hebei before sitting the final year in Tāmaki-Makaurau – Auckland.
Graduates will concurrently earn two qualifications recognised in China and internationally.
“We are delighted to see the programme gaining approval from China Ministry of Education,” says Unitec Executive Director Peseta Sam Lotu-Iiga.
“It has been a great honour to work alongside our partners at Hebei University of Engineering exploring mutually beneficial opportunities in a generous spirit of our long-standing people-to-people exchange,” says Mr Lotu-Iiga.
The approval of the joint programme represents a significant step forward in Unitec’s vision to increase its already well-established engagement with international tertiary institutions and learners, particularly in China.
For more than twenty years, the division has delivered joint Accounting and Architecture programmes in Shandong Province.
“Strong educational partnerships like this are built on years of trust, shared values, and cultural exchange,” says Don Sirimanne, Interim Director Marketing and International.
“Unitec is proud to contribute to New Zealand’s bilateral relationship with China by preparing globally competent graduates and fostering meaningful academic collaboration,” says Mr Sirimanne.
Lecturers in School of Computing, Electrical and Applied Technology will teach across twelve courses in the degree.
“Aotearoa – New Zealand and China have a shared interest in using applied learning to add value to the lives of our populations, sparking innovation and economic opportunities,” says Head of School, Susan Bennett.
“The approval of the programme also recognises the expertise of our lecturing staff who are looking forward to working with their colleagues in Hebei to finalise curriculum alignment and prepare to open delivery,” says Ms Bennett.
The announcement follows a visit from a high-level delegation of university leadership to Unitec in April where talks were progressed on other areas of collaboration including articulation pathways for further disciplines, joint research, study tours and other mutually beneficial activities.
In September last year, a group of engineering students from Hebei visited Unitec on a week-long cultural exchange. As well as attending classes, the students were welcomed on to Te Noho Kotahitanga Marae and taught how to make their own pounamu, cook boil up, prepare fry bread as well as how to make and perform poi.
Posted on

Local News – Streamside Education a hit with Porirua schools

Source: Porirua City Council

A programme giving schools the opportunity to learn more about their local natural environment and the importance of healthy waterways is proving popular.
The Streamside Education programme, run by Porirua City Council Parks Education Advisor Natalie Packer, is flexible and can support what students are learning in the classroom.
Since launching the programme in 2023, Natalie has worked with students of all ages from across Porirua.
Already this year groups from Aotea and Mana colleges have been out learning about the natural environment to help with their assessments.
This term students from Porirua East School have had the opportunity to learn about the connection between art and nature by doing creative activities at Pātaka Art + Museum in the morning, then planting in an area near their school in the afternoon.
This began recently with tamariki planting 230 new trees by Mexted Stream in Rānui, just around the corner from their school.
“We want the tamariki and rangatahi of Porirua to see the connection to their environment in their local community,” explains Natalie.
“This programme is about immersing them in nature and encouraging them to have a relationship with the local environment, so they can cherish it.”
With this year’s planting season getting underway, Natalie says there will be plenty of opportunities for schools to do some learning outside the classroom and put plants in the ground.
In 2024 about 3800 students, teachers and parent helpers from 34 schools across Wellington and Porirua helped during the planting season.
Posted on

BusinessNZ welcomes regulatory trim

Source: BusinessNZ

BusinessNZ welcomes today’s announcement by Minister for Regulation Hon David Seymour that Cabinet has approved the revocation of the outdated Health (Hairdressers) Regulations 1980.
Small business owners in the hairdressing and barbering sector will no longer have to operate under unnecessary regulations, including mandatory chair spacing and regulated lighting levels, with dogs banned from salons and restrictions on refreshments served.
With the hairdressing regulations revoked, local authorities will no longer be required to monitor the industry. The industry will still be required to meet health and safety regulations, with any risks managed under general legislation applying to all businesses.
BusinessNZ Chief Executive Katherine Rich says the outcome for the hairdressing sector bodes well for the Ministry for Regulation’s ongoing work reducing unnecessary and restrictive red tape.
“BusinessNZ applauds the methodical and evidence-based approach the Ministry for Regulation has taken in this review. It’s a model for how to tidy up the rules across other sectors. The engagement with businesses, councils and industry bodies was thorough, and the end result is a commonsense solution that still protects public health while removing duplicative and inconsistent regulation,” Mrs Rich said.
The Ministry for Regulation’s next review will be of the telecommunications sector.
The BusinessNZ Network including BusinessNZ, EMA, Business Central, Business Canterbury and Business South, represents and provides services to thousands of businesses, small and large, throughout New Zealand.
Posted on

Tech and Security – From 54 billion to 94 billion: Cookie theft skyrockets as hackers exploit your browser

Source: NordVPN

New Zealand ranks 100th out of 253 countries, with 77.5 million leaked cookies — over 6 million of which are still active and tied to real user activity.

According to the latest research by cybersecurity company NordVPN, New Zealand has landed a troubling spot on the global leaderboard for leaked cookies, ranking 100th out of 253 countries. 77.5 million cookies linked to New Zealand users have been found on the dark web. (ref. https://nordvpn.com/blog/cookies-research/ )

Although cookies are commonly seen as helpful for improving online experiences, many don’t realize that hackers can exploit them to steal personal data and access secure systems.

“Cookies may seem harmless, but in the wrong hands, they’re digital keys to our most private information,” says Adrianus Warmenhoven, cybersecurity expert at NordVPN. “What was designed to enhance convenience is now a growing vulnerability exploited by cybercriminals worldwide.”

The hidden risk behind everyday browsing

Cookies are small text files that websites store on a user’s browser to remember preferences, login details, and browsing behavior. They play a vital role in making online experiences smoother, helping websites load faster, keeping shopping carts full, and allowing users to stay logged in across sessions. Without cookies, the convenience and personalization of the modern web would be severely limited.

However, as the digital landscape evolves, so does the misuse of these tools. Cybercriminals have learned to harvest cookies to hijack sessions, steal identities, and bypass security measures.

“Most people don’t realize that a stolen cookie can be just as dangerous as a password,” says Warmenhoven. “Once intercepted, a cookie can give hackers direct access to accounts and sensitive data, no login required.”

Millions of pieces of personal data exposed

NordVPN’s research reveals a massive malware operation that stole almost 94 billion cookies — a dramatic jump from 54 billion just a year ago, marking a 74% increase. Even more concerning, 20.55% of these cookies are still active, posing an ongoing risk to users’ online privacy. Most stolen cookies came from major platforms, including Google (4.5 billion), YouTube (1.33 billion), and over 1 billion each from Microsoft and Bing.

The growth is just as alarming when comparing personal data exposure over the past few years. In 2024, NordVPN identified 10.5 billion assigned IDs, 739 million session IDs, 154 million authentication tokens, and 37 million login credentials. In 2025, those numbers rose sharply, with 18 billion assigned IDs and 1.2 billion session IDs now exposed. These data types are critical for identifying users and securing their online accounts, making them highly valuable to cybercriminals.

The stolen information often included full names, email addresses, cities, passwords, and physical addresses — key personal data that can be used for identity theft, fraud, and unauthorized account access.

The data was harvested using 38 different types of malware, more than triple the 12 types identified last year. The most active strains were Redline (41.6 billion cookies), Vidar (10 billion), and LummaC2 (9 billion). These malware families are known for stealing login details, passwords, and other sensitive data.

Redline is a powerful infostealer that extracts saved passwords, cookies, and autofill data from browsers, giving hackers direct access to personal accounts.

Vidar works similarly but also downloads additional malware, making it a gateway to more complex attacks.

LummaC2 is particularly evasive, frequently updating its tactics to slip past antivirus tools and spread across systems undetected.

In addition to these known threats, researchers discovered 26 new types of malware not seen in 2024 — a sign of how quickly the cybercrime landscape is evolving. New entries like RisePro, Stealc, Nexus, and Rhadamanthys are especially dangerous. RisePro and Stealc are built to rapidly steal browser credentials and session data, while Nexus targets banking information using mobile emulation techniques. Rhadamanthys stands out with its stealthy design and ability to deploy follow-up malware, making it a multipurpose threat capable of causing extensive damage.

The stolen cookies came from users in 253 countries. New Zealand ranked 100th in total volume, with 7.78% of the cookies being active. However, that still represents over 6 million cookies tied to real user activity — a massive potential exposure.

“Even a small percentage of a huge dataset is massive,” says Warmenhoven. “That’s millions of people potentially exposed to cybercrime.”

Easy ways to protect your data from cyber threats

Stay vigilant online to protect yourself from the risks posed by data breaches and malware. Start by using strong, unique passwords for every account and enabling multifactor authentication (MFA) whenever possible. Additionally, be cautious about sharing personal information and avoid clicking on suspicious links or downloading unknown files.

Another crucial step is keeping your devices up to date. This can help block harmful malware before it can compromise your system. Regularly cleaning your site data is also essential. Many users don’t realize that active sessions may persist even after they close their browser. Clearing this data helps reduce the window of opportunity for unauthorized access. Lastly, always check the privacy settings on your online accounts to ensure you only share information with trusted services.

“Usually, people close the browser, but the session is still valid, and the cookie is still there. If you never clean that site data, that session will be valid for as long as the site owner deems it secure,” says Warmenhoven. “Taking basic precautions like using strong passwords, enabling MFA, and staying alert online can significantly reduce the risk of falling victim to cyberattacks. It’s a small investment of time that can protect you from big threats.”

Methodology

The data was analyzed by NordStellar, a threat exposure management platform. The research was conducted between April 23 and April 30. The researchers used data gathered from Telegram channels where hackers advertise what stolen information is available for sale. This led to a dataset of information about 93.76 billion cookies. Researchers analyzed whether the cookies were active or inactive, which malware was used to steal the cookies, which country they were from, as well as what data they contained concerning the company that made the cookie, the user’s OS, and keyword categories assigned to users. NordVPN did not buy stolen cookies, did not access the contents of the cookies, and only examined what types of data were contained within them.

ABOUT NORDVPN

NordVPN is the world’s most advanced VPN service provider, trusted by millions of internet users worldwide. The service offers features such as dedicated IP, Double VPN, and Onion Over VPN servers, which help to enhance online privacy with zero tracking. One of NordVPN’s key features is Threat Protection Pro, a tool that blocks malicious websites, trackers, and ads and scans downloads for malware. NordVPN is part of Nord Security, whose latest product is Saily, a global eSIM service. Known for its user-friendly design, NordVPN offers some of the best prices on the market and operates over 7,600 servers in 118 countries. For more information, visit nordvpn.com.