Why mandatory 2FA matters: strengthening payroll security in a rising threat landscape

As cyber threats continue to evolve, protecting employees and payroll data have never been more critical. iPayroll has introduced mandatory two-factor authentication (2FA) for Employee Kiosk logins. Two-factor authentication (2FA) adds an extra layer of protection beyond just a username and password. It’s an important step in strengthening security and reducing the risk of unauthorised access.

The growing risk of data breaches in New Zealand

Recent events highlight why stronger security measures are no longer optional.

In early 2026, a major breach of the ManageMyHealth patient portal exposed sensitive medical information of more than 120,000 New Zealanders, raising widespread concerns about data privacy and system vulnerabilities.

At the same time, cyber threats are increasing across the board.

Reports show:

• Up to 59% of New Zealand businesses experienced a cyber incident in the past year (source: Learning People)
• 44% of medium-to-large organisations have fallen victim to cybercrime (source: Kordia NZ Business Cyber Report 2026)
• Thousands of incidents are reported annually, with millions in financial losses.

With payroll systems holding highly sensitive employee data, including personal details, bank accounts and tax information, they are a clear target for cybercriminals.

Why 2FA is critical for payroll security

Passwords alone are no longer enough. Many data breaches occur due to:

• Weak or reused passwords
• Phishing attacks
• Credential theft

2FA significantly reduces these risks by ensuring that even if login details are compromised, access cannot be granted without the second verification step.

In an environment where cybercriminals are increasingly using AI to launch more sophisticated attacks, layered security is essential.

Protecting your business and your people

Payroll is one of the most sensitive functions within any organisation. A breach doesn’t just impact systems, it impacts employees directly.

Mandatory 2FA helps:

• Reduce the risk of unauthorised access
• Protect employee personal and financial data
• Strengthen compliance and security practices
• Build trust with your workforce

A proactive approach to security

Cybersecurity continues to make headlines, proactive measures like 2FA are essential in safeguarding sensitive information.

By introducing mandatory 2FA, iPayroll is helping businesses stay ahead of emerging threats, protecting not just systems, but the people behind them.

If you would like to know more information about iPayroll’s 2FA or other features., request a call back and one of our friendly team members at sales@ipayroll.co.nz