Bridewell research reveals 59% of finance cyber leaders hit by ransomware attack
Reading, UK – 30 July 2024 – Almost six in ten (59%) businesses in the financial services sector have admitted to being on the receiving end of a ransomware attack in the past 12 months.
This is according to the latest research by Bridewell, which has surveyed 521 staff responsible for cyber security at UK CNI organisations encompassing civil aviation, energy, transport, finance and central government.
The dual attack threat
Ransomware attacks have significant implications for the financial services industry. Organisations that fail to deal effectively with these threats risk their reputation and falling foul of strict compliance rules. 46% of respondents cited losses from legal fines and reputational damage as the primary consequences of a breach.
In addition to the growing ransomware threat, phishing attacks are also widespread, averaging 13 incidents per year. The dual threat is putting immense pressure on the industry to enhance its cyber defences and response strategies.
Delayed response
Given these significant consequences, the sector is struggling to react quickly to cyber incidents and mitigate the damage they cause. While financial businesses take 6.62 hours on average to respond to ransomware attacks, phishing, nation-state backed attacks and malware require more than 10 hours, while supply chain attacks and data theft misuse require more than 13 hours. The nation-state threat continues to escalate as Russian, Chinese, Iranian and North Korean-affiliated threat actors escalate their efforts, particularly in the wake of the Russia-Ukraine and Israel-Palestine conflicts.
Future-proofing finance
Despite these concerns, finance organisations are actively enhancing their cyber security measures. Almost all financial organisations (95%) are leveraging AI-driven tools, including chatbots, phishing detection and data loss prevention. Furthermore, nearly half of respondents (49%) expect to spend more on IT security than last year.
“The financial sector is subject to strict rules and regulations, with non-compliance detrimental financially and reputationally, making it a vulnerable industry. But ransomware and phishing attacks are having a detrimental impact, and lengthy response times are only adding to the damage caused. With nation-state attacks also posing a significant threat, the sector must fortify its cyber defences with incident response and reporting, defined risk management practices, regular audits and training programmes to futureproof its operations. It’s promising that the sector is already adopting AI-driven solutions and planning to invest more in cyber security in order to do so,” says Anthony Young, Chief Executive Officer of Bridewell.
About Bridewell
Bridewell is the UK’s leading cyber security partner for organisations operating within Critical National Infrastructure (CNI), as well as companies in other highly regulated sectors who require the highest standard of cyber security.
Providing end-to-end cyber security services, including consulting, 24/7 managed security, data privacy and penetration testing, Bridewell work in continuous partnership with clients to implement robust security solutions which defend and protect against threats and attacks and allow organisations to operate safely and efficiently.
As Microsoft’s number one cyber security partner for CNI in the UK, Bridewell are experts in maximising the effectiveness of Microsoft Security technology to deliver robust and effective solutions. The company also works with other technologies, depending on a client’s requirements.
Bridewell holds the most NCSC assured services of any cyber security services provider, and the company also holds accreditation from other leading organisations including CREST, ASSURE, IASME Consortium, SOC2, Cyber Essentials Plus, ISO27001, ISO9001 and are PCI DSS QSA Company.