Cloud-based office solutions under increasing attack

New York, April 16, 2018 -- Specialist insurer Beazley has reported that cloud-based office solutions are coming under increasing attack from cyber-criminals. The majority of incidents involving compromised business email accounts reported to the Beazley Breach Response (BBR) Services team during the first quarter 2018 were for organizations using cloud-based programs, a sharp increase over the previous quarter. The three sectors most affected were financial services, healthcare and professional services.

More and more organizations are turning to cloud-based solutions but, when a business email account is hacked, they find that the system’s default settings are inadequate to show the extent to which emails have been compromised.

These incidents are usually caused by an employee clicking on a link in a phishing email, HelpDesk message, or Microsoft survey. After clicking on the link, the employee is redirected to a legitimate-looking website and asked for email credentials.  This provides genuine credentials to the cyber-criminal who can then log into the account undetected. Once in the chain of communication, the cyber-criminal can provide fraudulent instructions to divert and steal payments made by or to the organization, or access personally identifiable information.

The compromised credentials may also allow the cybercriminal to access other data and, if the organization uses cloud-based OneDrive storage, the cybercriminal will have access to all files the employee can access.

Katherine Keefe, global head of Beazley Breach Response Services, said: “The number of compromised email accounts is accelerating but simple steps such as frequently changing passwords, having dual-factor authentication and removing auto-forwarding or auto-delete rules can help reduce vulnerabilities. With privacy regulations becoming more stringent and the public demanding greater accountability for their personal data, it is more important than ever for organizations to secure their lines of defense.”

The full Beazley Breach Insights report for the 1^st Quarter 2018 can be accessed here

-ends-

BZ_PR16042018

Note to editors:

Beazley plc (BEZ.L) is the parent company of specialist insurance businesses with operations in Europe, the US, Canada, Latin America, Asia and Australia. Beazley manages six Lloyd’s syndicates and in 2017 underwrote gross premiums worldwide of $2,344 million. All Lloyd’s syndicates are rated A by A.M. Best. 

Beazley’s underwriters in the United States focus on writing a range of specialist insurance products. In the admitted market, coverage is provided by Beazley Insurance Company, Inc., an A.M. Best A rated carrier licensed in all 50 states. In the surplus lines market, coverage is provided by the Beazley syndicates at Lloyd’s.

Beazley is a market leader in many of its chosen lines, which include professional indemnity, property, marine, reinsurance, accident and life, and political risks and contingency business.

For more information please go to: www.beazley.com

Eleanor Lewis
Beazley Group
+44 (0)20 7667 0538
[email protected]