Charities and non-profit organisations do so much, for so many. With more than 168,000 registered charities in the UK, they are a cornerstone of our society and provide essential services to those in need, relying on volunteers who work selflessly for others.
So, why are they targeted by cyber criminals and hackers? Why do charities, who exist to help people, deserve to be attacked?
The answer is: Because the criminals do not care.
It sounds harsh but it is, sadly, true. By understanding that, charities and non-profit organisations can begin to take the steps necessary to protect themselves.
Why cyber criminals target charities and non-profit organisations
Unfortunately, many charities and non-profit organisations do not appreciate or fully understand how, or why, the data they hold is of value to cyber criminals. This is especially true for smaller charities, and leaves them even more vulnerable to cyber attacks.
Because charities are often under-resourced, focusing their budgets on mission-critical activities rather than robust cyber defences, cyber criminals will target non-profits for sensitive data, including:
- Donor information
- Financial records
- Client details
A single breach can have a devastating impact, not only causing financial harm but also eroding trust with donors, volunteers and beneficiaries.
As Helen Stephenson, the Chief Executive of the Charity Commission for England & Wales, points out in the National Cyber Security Centre (NCSC)’s guide for small charities: “Charities are not immune to cyber crime. The valuable funds, assets and good reputation of charities are at risk from the increasing threat of cyber crime. That is why everybody involved with charities – donors, volunteers, employees, professional advisers and, above all, trustees – have a role to play in protecting the charity sector from cyber-related harm.”
What impact do cyber attacks have on charities?
The 2024 Cyber Security Breaches Survey found that almost a third of charities (32%) experienced some form of cyber security breach or attack in the previous 12 months. For charities with higher incomes – around £500,000 or more annually – this number rises to 66%.
The impact these attacks have on charities can be immediate, costly and have a long-lasting effect due to:
- A severe disruption of services which charities provide
- Donors losing trust in the charity
- Legal and financial repercussions, including fines or penalties
- The reputational damage caused by the loss of funds or sensitive data
Helen Stephenson adds in the NCSC cyber threat report for UK charities: “Charities save lives and provide many of the services that make life worth living. All charities ultimately rely on public trust and continued public generosity. So the impact of any cyber attack on a charity can therefore be devastating, not just for the organisation and those who rely on its services, but also in undermining public confidence and support.”
What can be done to prevent attacks
If your charity has never been affected by a cyber attack, that doesn’t mean it won’t be. By not acting now to ensure your charity is safe and secure, it could lead to any of these common forms of attack:
- Phishing
- Email compromise
- Fake organisations and websites
- Ransomware
One of the major steps your charity can make is to listen to government advice and protect yourself by using a set of “cyber hygiene” measures.
Most charities should have a broad range of these measures in place, the most common being: updated malware protection, password policies, cloud back-ups, restricted admin rights and network firewalls.
Another key step is to ensure your staff and volunteers are trained on how to prevent cyber crime, and know how to respond to an attack.
By knowing practical steps, such as how to protect your charity from phishing attacks, or how and why to set strong passwords, or how to keep your devices secure, can go a long way towards improving your charity’s cyber security.
Why it’s important for your charity to be Cyber Essentials certified
If your charity or non-profit organisation does not have Cyber Essentials certification, now is the time to address that.
Cyber Essentials is a government-backed scheme to help organisations protect themselves against common online threats, and will help safeguard your charity, big or small, against the most common online threats.
By improving your charity’s cyber security, your data, beneficiaries, donors and employees, will significantly increase your protection from cyber crime.
At Black Swan, we have worked closely with a number of organisations to help them achieve Cyber Essentials certification.
It can be complicated to understand and navigate the requirements of Cyber Essentials, but we make the process easy, from start to finish, to help you deploy a cyber secure foundation for your business.
How Black Swan can help protect your charity from cyber crime
At Black Swan, we understand the distinct challenges charities face in maintaining secure digital operations without stretching their budgets.
Our customised approach ensures that your organisation’s cyber security is reliable, scalable and cost-effective, so you can focus on what you do best – helping others. Our specialised solutions include:
- Flexible, budget-friendly cyber security packages
- Robust data backup and recovery
- Anti-phishing and security awareness training
- 24/7 monitoring and support
Contact Black Swan today
We believe charities and non-profits should be able to carry out their mission without the worry of cyber threats, so let us take care of your cyber security needs, so you can focus on making a difference.
To discuss how we can help secure your charity or non-profit organisation, contact us on 01246 927142, email us at hello@blackswancyber.co.uk or complete the form on our website.
We look forward to hearing from you, and beginning your journey towards robust cyber security.
