Bridewell research reveals 59% of finance cyber leaders hit by ransomware attack

Escalating ransomware and phishing threats demand reinforced cyber defences for financial services.

Almost six in ten (59%) businesses in the financial services sector have admitted to being on the receiving end of a ransomware attack in the past 12 months.

This is according to the latest research by Bridewell, which has surveyed 521 staff responsible for cyber security at UK CNI organisations encompassing civil aviation, energy, transport, finance and central government.

The dual attack threat

Ransomware attacks have significant implications for the financial services industry. Organisations that fail to deal effectively with these threats risk their reputation and falling foul of strict compliance rules. 46% of respondents cited losses from legal fines and reputational damage as the primary consequences of a breach.

In addition to the growing ransomware threat, phishing attacks are also widespread, averaging 13 incidents per year. The dual threat is putting immense pressure on the industry to enhance its cyber defences and response strategies.

Delayed response

Given these significant consequences, the sector is struggling to react quickly to cyber incidents and mitigate the damage they cause. While financial businesses take 6.62 hours on average to respond to ransomware attacks, phishing, nation-state backed attacks and malware require more than 10 hours, while supply chain attacks and data theft misuse require more than 13 hours. The nation-state threat continues to escalate as Russian, Chinese, Iranian and North Korean-affiliated threat actors escalate their efforts, particularly in the wake of the Russia-Ukraine and Israel-Palestine conflicts.

Future-proofing finance

Despite these concerns, finance organisations are actively enhancing their cyber security measures. Almost all financial organisations (95%) are leveraging AI-driven tools, including chatbots, phishing detection and data loss prevention. Furthermore, nearly half of respondents (49%) expect to spend more on IT security than last year.

“The financial sector is subject to strict rules and regulations, with non-compliance detrimental financially and reputationally, making it a vulnerable industry. But ransomware and phishing attacks are having a detrimental impact, and lengthy response times are only adding to the damage caused. With nation-state attacks also posing a significant threat, the sector must fortify its cyber defences with incident response and reporting, defined risk management practices, regular audits and training programmes to futureproof its operations. It’s promising that the sector is already adopting AI-driven solutions and planning to invest more in cyber security in order to do so,” says Anthony Young, Chief Executive Officer of Bridewell. 

Lloyds Banking Group strengthens its commitment to enhancing cyber resilience by becoming a...
Sharp introduces new packages and services to boost UK organisations' security and AI utilisation.
AI's accelerated role in creating cyber threats necessitates new security measures.
NETSCOUT's latest research highlights the evolving threat of precision-guided DDoS attacks,...
Horizon3.ai transforms Endpoint Detection with its cutting-edge NodeZero ESE healthcheck, offering...
Commvault introduces HyperScale Edge and HyperScale Flex to bolster cyber resilience and data...
Daon has been recognised as a Leader by Gartner in the Magic Quadrant for Identity Verification,...
CSIRO explores the role of ChatGPT-4 in supporting human analysts, easing workloads and improving...