HM Treasury Hit by Five Million Malicious Emails in Past Three Years

Her Majesty’s Treasury, the UK government department responsible for the nation’s economic policy, has been hit by nearly five million malicious email attacks in the past three years, according to official figures.

The data obtained by the think tank Parliament Street following a Freedom of Information (FoI) request showed that 4,870,389 phishing, malware and spam emails targeting HM Treasury were successfully blocked in this period.

This was comprised of 1,271,207 malicious email attacks from October 2018 to September 2019, 1,918,944 between October 2019 to September 2020, and 1,680 from October 2020 to September 2021.

The news comes as Chancellor Rishi Sunak has delivered the UK government’s annual budget, which has included pledges around cybersecurity, such as funding to reduce the digital skills gap.

The figures highlight the growing determination of cyber-criminals to access and steal confidential government data. Earlier this week, Parliament Street revealed that more than 126 million malicious emails had been fired at House of Commons inboxes this year, a 358% increase on the total figure for 2020.

There was no data on how many threats slipped past email filters over this period.

Commenting on the figures, Chris Ross, SVP International for Barracuda Networks, said: “The ever-present cyber threat facing public sector organizations is not going to disappear any time soon. In fact, recent trends indicate that cyber-attacks are likely to become more sophisticated, and criminals will find new ways to breach systems, disrupt apps and websites, and steal sensitive data.

“This is why it is imperative the organizations defend themselves from all angles, with web application firewalls, to protect cloud infrastructure and network, email inbox defense software, to help defend against the onslaught of phishing attacks targeting employees, and a third party data backup solution, to protect data and organizations against the growing ransomware threat.”

Organizations need to implement a combination of technical solutions, security policies, and employee training to combat these threats. New-school security awareness training can enable your employees to defend themselves against social engineering attacks.

With thanks to the Cyber defence Alliance and InfoSecurity Magazine. The full story is here: https://www.infosecurity-magazine.com/news/treasury-five-million-malicious/

Request A Demo: Security Awareness Training

New-school Security Awareness Training is critical to enabling you and your IT staff to connect with users and help them make the right security decisions all of the time. This isn’t a one and done deal, continuous training and simulated phishing are both needed to mobilize users as your last line of defence. Request your one-on-one demo of KnowBe4’s security awareness training and simulated phishing platform and see how easy it can be!

PS: Don’t like to click on redirected buttons? Cut & Paste this link in your browser: https://info.knowbe4.com/demo_kcm_partner?partnerid=001a000001lWEoJAAW