The social media giant said hackers stole digital login codes allowing them to take over nearly 50 million accounts in its worst security breach ever.
A spokesperson for the advocacy body Internet NZ, Andrew Cushen, said the hack seemed to allow access to private parts of a user's Facebook profile.
He said it was another reminder that people needed to take internet security carefully.
"It's also and more importantly a call to action for organisations like Facebook who we trust to look after a huge amount of information about us all and it looks like this hack exploited part of Facebook's security set-up in a way that I hope they learn from quickly, I hope that they close that loop hole quickly."
Andrew Cushen said people should make sure they updated their passwords regularly, and make sure they were strong.
Facebook founder Mark Zuckerberg has described internet security as "an arms race" and said the company was constantly working on it to protect the more than 2.2 billion monthly users.
The company said it was made aware of the breach on Tuesday and fixed the issue by Thursday.
