According to a recent study of 254 companies in seven countries by the US Ponemon Institute, financial institutions are suffering on average 125 intrusions a year (three times more than six years ago). Such statistics are rarely highlighted, but are enough to demonstrate the growing interest of cyber criminals in banks and insurance companies, which are now the victims of increasingly sophisticated attacks.
Major consequences on a range of levels
These security breaches lead to loss of revenue, undermine the integrity of client data and assets and have an adverse impact on the reputation of the institutions in question. In this context, another study, by B2B International, reveals that the financial institutions affected suffer average losses of nearly a million dollars ($926,000) from every cyber security incident to which they fall victim.
Another interesting figure is that institutions spend over €250,000 in combating a Denial of Service attack (DDoS) and nearly $100,000 for a ransomware-type attack. Finally, client losses amounted to an average $10,032 for companies and $1,446 for individuals. The damage caused by cyber attacks is therefore very significant and it is worthwhile to take pragmatic measures to guard against such incidents.
Some examples of attacks suffered by financial institutions
The world of finance has generally, been less affected than other sectors by the most common forms of cyber attack, such as malware. However, they are particularly exposed to Denial of Service and targeted attacks. A sharp increase has also been noted in the number of users infected by banking Trojans, whose principal aim is to steal client data. Finally, to complete the overview, financial institutions are affected by targeted phishing, social engineering and backdoors which enable cyber criminals to infiltrate information systems with complete secrecy.
Implementing appropriate defence strategies
For Pierre-Yves Hentzen, CEO of Stormshield, “Cyber security is now a major preoccupation for directors of major banks and insurance companies. This is reflected in particular in a sharp rise in recent years in budgets for information system security.”
Although they are already well-equipped with established solutions, banks now need to go further, taking advantage of new approaches such as AI and analytic technologies which will enable them to add to their existing arrangements and improve their levels of security. By doing so, financial institutions can actively guard against the new threats facing them and deliver digital transformation confidently and successfully.
“But in an area as sensitive as banking and insurance, companies need to protect themselves by choosing trusted technologies, whose reliability and robustness is reflected by certification and classification at the highest European level” says Pierre-Yves Hentzen.
To expand on the topic, discover our article with @annick_baudet 👉 Will financial sector weaknesses cause problems for banks in 2018? https://t.co/IPnfbOuuxc #cyberattacks #infosec pic.twitter.com/Q9tMyj54D5
— Stormshield (@Stormshield_) 15 mai 2018
