Organisations lose £3.8 million via email and social media hacking

Action Fraud received 15,214 reports of email and social media hacking between February 2020-21. Of these, 1,741 reports came from organisations reporting a combined loss of £3.8 million, an average of £2,182 per organisation.

Email and social media account hacking was the most common form of cyber-dependent crime reported to Action Fraud last year.

The National Fraud Intelligence Bureau and the City of London Police have launched a two week campaign to raise awareness of the simple steps everyone should take to properly secure their email and social media accounts, under the hashtag #SecureYourAccounts.

Action Fraud, the national reporting centre for fraud and cyber crime, received 15,214 reports of email and social media hacking between February 2020 and February 2021 – 88% of which were from individuals who had their personal accounts compromised by criminals.

While organisations, such as limited companies, sole traders and charities, only made 1,741 reports of hacking, they reported losing £3.8 million to these crimes compared to the £283,500 lost by individual victims. Almost a quarter of all victims (23%) were aged between 20 and 29.

How to protect yourself and keep your accounts secure

  • Use a strong and separate password to protect your email. You should also protect your other important accounts, such as banking or social media.
  • Enable two-factor authentication (2FA). It will help to stop hackers from getting into your online accounts, even if they have your password.
  • Be cautious of social media messages that ask for your login details or authentication codes, even if the message appears to be from someone you know.
  • If you can't access your account, search the company's online support or help pages. You'll find information about how to recover your account.
  • You can report suspicious emails you have received but not acted upon, by forwarding the original message to report@phishing.gov.uk. You can report suspicious texts you have received but not acted upon, by forwarding the original message to 7726, which spells SPAM on your keypad.

What to do if your account has been compromised

If you cannot access your account as it has been compromised, follow the National Cyber Security Centre's (NCSC) guidance on how to recover a compromised account.

If a demand for payment is made, do not pay any money to the suspect in order to regain access to your account. It’s likely the suspect will continue to demand more money instead of giving you control of your account back.

If you have paid any money, contact your bank immediately and report it to Action Fraud online at actionfraud.police.uk or by calling 0300 123 2040 as soon as possible.

Consumer Cyber Action Plan

A new digital tool for individuals to receive advice on improving their cyber security has been launched.

The Consumer Cyber Action Plan creates free tailored advice on steps you can take to reduce the chance you become victim of an online attack

Polling carried out on behalf of the NCSC has shown that 81% of British people fear themselves or their friends or family falling victim to cyber crime. Specifically:

  • 58% are worried about their money being stolen online
  • 53% are worried about having their personal details stolen online
  • 48% are worried about their devices being infected by viruses or malware
  • Those aged 25 to 34 are most worried – 86% of people in this age bracket revealed concerns

How to protect yourself online

To help protect themselves from falling victim, the NCSC urges people to complete a short survey at www.cyberaware.gov.uk that generates a personalised list of actions linked to cyber aware behaviours.

Cyber Essentials certification

Organisations that have strong cyber security practices in place can achieve Cyber Essentials certification to demonstrate their credentials.

Buckinghamshire Business First has achieved Cyber Essentials accreditation, demonstrating to suppliers, members and employees alike that we can be trusted with their data and have robust cyber security practices in place.

Why should you get Cyber Essentials certification?

  • Reassure customers that you are working to secure your IT against cyber attack
  • Attract new business with the promise you have cyber security measures in place
  • Have a clear picture of your organisation's cyber security level
  • Access some government contracts that require Cyber Essentials certification

Learn more about Cyber Essentials certification.

Business community ambassadors