Cyberattacks Targeting State and Local Government Increase by 50%

Stu Sjouwerman | Sep 24, 2020

state and local government phishing attackState, local, tribal, and territorial government agencies and municipalities are under attack. Observations and data from security vendor BlueVoyant highlight the attacks and the results.

We’ve long known that state and local government has been a target. But new data from BlueVoyant’s State and Local Government Security Report makes the case that it’s only getting worse. According to the report:

  • Monthly attacks have risen 50% since 2017
  • Ransoms rose from $30,000 in 2017 to over $1,000,000 in 2019
  • 555 compromised email accounts across only 38 analyzed data breaches
  • 95K incidents of inbound targeting of SLTT in just 6 months

The bad guys realize government is expected to always be running, so they’re the perfect target to take out with ransomware. They also do business with countless companies with money changing hands, making them also the perfect target for fraud, island hopping, and more.

BlueVoyant recommends a number of responses including performing a cybersecurity risk assessment, considering managed security services, and cyber insurance. I’d also add the need to Security Awareness Training to empower users with the knowledge of how to identify malicious phishing attacks – something BlueVoyant admit in the report as a primary attack vector – and keep government organizations from being breached.

Topics: Phishing

Discover Your Organization’s Phish-prone™ Percentage

Ninety-one percent of data breaches begin with spear phishing. Launch our Free Phishing Security Test for up to 100 users to uncover your team's vulnerability and see how your security posture stacks up against industry benchmarks.

Get Your Free Phishing Security Test

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.