Cyberattacks Targeting State and Local Government Increase by 50%

Stu Sjouwerman | Sep 24, 2020

state and local government phishing attackState, local, tribal, and territorial government agencies and municipalities are under attack. Observations and data from security vendor BlueVoyant highlight the attacks and the results.

We’ve long known that state and local government has been a target. But new data from BlueVoyant’s State and Local Government Security Report makes the case that it’s only getting worse. According to the report:

  • Monthly attacks have risen 50% since 2017
  • Ransoms rose from $30,000 in 2017 to over $1,000,000 in 2019
  • 555 compromised email accounts across only 38 analyzed data breaches
  • 95K incidents of inbound targeting of SLTT in just 6 months

The bad guys realize government is expected to always be running, so they’re the perfect target to take out with ransomware. They also do business with countless companies with money changing hands, making them also the perfect target for fraud, island hopping, and more.

BlueVoyant recommends a number of responses including performing a cybersecurity risk assessment, considering managed security services, and cyber insurance. I’d also add the need to Security Awareness Training to empower users with the knowledge of how to identify malicious phishing attacks – something BlueVoyant admit in the report as a primary attack vector – and keep government organizations from being breached.

Topics: Phishing

Discover Your Organization’s Phish-prone™ Percentage

Ninety-one percent of data breaches begin with spear phishing. Launch our Free Phishing Security Test for up to 100 users to uncover your team's vulnerability and see how your security posture stacks up against industry benchmarks.

Get Your Free Phishing Security Test

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the human and AI workforce to make safer security decisions every day. Trusted by over 70,000 organizations worldwide, we help strengthen security culture and manage risk. Our comprehensive AI-driven platform includes awareness and compliance training, cloud email security, real-time coaching, crowdsourced anti-phishing, AI Defense Agents, agent security and more. As the only global security platform of its kind, KnowBe4 provides personalized content, tools, and techniques to keep the modern workforce safe from phishing, vishing, deepfakes, and emerging threats.

Get the latest insights, trends and security news. Subscribe to CyberheistNews.