Cyber Attacks on Charities Increasing

Have you seen an increase in your insurance costs and the cover that is now available to you from your broker and insurers?

Recent cyber attacks on charities

Many businesses assume that they have transferred their liabilities and risk when their data is in a cloud provider’s hands. In most cases this is not the position and there is little protection in terms of liability with your cloud providers.

In July 2020, The National Trust became one of the latest victims to issue a data breach alert, after cloud computing service Blackbaud was attacked. The growing cyber attacks have so far also affected charities such as Sue Ryder, Young Minds as well as dozens of universities. 

Although Blackbaud have said the data compromised did not include bank account or payment card details, a source has told the BBC that in some cases it involved donors’ details including:

  • Names, ages and addresses
  • Car licence details
  • Employers
  • Estimated wealth and identified assets

Using cloud-based services for your charity's data

During a webinar we recently hosted, a question was raised regarding mitigating the need for cyber protections due to cloud based services being purchased. Provided that you have systems, policies and procedures in place to keep data secure, using the cloud as a backup option is suitable and provides benefits to re-instate data and potentially defeat ransomware demands, which are increasing.

Ensuring your charity's cloud-based data is secure

Certain things that you may need to consider when using a cloud-based service, however, include:

  • Who has the access and authority to modify backups?
  • How secure are your backups, could a ransomware attack overwrite previous backups, have you ensured your cloud provider keeps multiple versions of backed up data?
  • What support will your cloud provider provide in the event of an attack?
  • Will your cloud provider accept responsibility for attacks via their systems?
  • Do you have client or other service providers software on your systems, is this clear to your cloud provider and are there any additional terms or restrictions from a third-party perspective?
  • Does your cloud provider have multi-factor authentication to protect backups?

Such steps should assist to mitigate the risk of ransomware and other cyber-attacks. It is essential that you manage data as securely and as closely as you would if this was stored on your own systems. There are also Information Commissioner and GDPR issues around data that is sensitive or personal that is then made public: this is still your risk and liability.

Protect your charity with cyber insurance

Cyber insurance can help protect your business against a range of cyber threats and exposures, including cybercrime, data breaches and system interruption.

Top activity areas for cyber-criminals include:

  • Ransomware
  • Phishing
  • Data leakage
  • Hacking
  • Insider threat

Cover can be purchased to protect against GDPR breaches, as part of a cyber protection policy. Get a cyber insurance quote online or call us on 0330 678 1221.

Charity insurance from Towergate

Every charity is unique, so the policy that’s right for your needs to be specially tailored to your needs. At Towergate, we’ll take the time to get to know your charity and work closely with you to draw up and cost a charity insurance policy that will give you the peace of mind that you’re covered in any event. Call us for a quote when you’re ready on 0330 123 5274, or read more about our specialist charity insurance.

About the author

James Anscombe Cert CII - charity insurance articles author

James Anscombe Cert CII is a respected industry leader with over 10 years' business development experience protecting clients in the charity insurance sector. His professional area of expertise is working with and developing new clients within the not-for-profit sector, offering the best solutions to each individual charity to protect organisations for the long term.

This is a marketing article by Towergate Insurance.

Other articles you may like

Guide To Charity Insurance

A Guide to Charity Insurance

Every charity is unique, so the policy that’s right for you needs to specially tailored to your needs. At Towergate, we’ll take the time to get to know your charity and work...

View article
Cyber Crime

Cyber Crime in Schools: Increase Protection and Reduce Risk

Cyber crime is on the increase and schools can be particularly vulnerable. Read how you can help protect against this threat.

View article
Cyber Crime

Mitigate the Cyber Risks for Care Businesses Using Cloud Based Services

With more care teams working from home it is more critical than ever before to ensure you have the correct and adequate IT protection in place. Criminal activity is varied...

View article
A Guide To Care Home Insurance

A Guide to Care Home Insurance

A simple guide to care home insurance. We explain the features, exclusions and optional covers that are usually found in this type of business insurance. From public liability...

View article
Elderly Gardener Care Home

Safety for Care Home and Hospice Gardens

Many people in care homes and hospices look forward to the ever-changing scenery of a garden as it comes alive after the frosty months of winter. However, it is critical to...

View article
Legal Advice Hub For Care And Medical Businesses Small

Legal Advice Hub for Care and Medical Businesses

As part of your insurance policy, Towergate offers you access to the Markel Law Hub, a legal information portal to give up-to-date legal information and a wide range of legal...

View article