As you will be aware, in May 2017 there was a ransomware attack on over 200,000 organisations, including the National Health Service (NHS), in approximately 150 countries.
The Charity Commission has stated that Charities could be at risk and “are urged to be vigilant. The vulnerabilities exploited by the hackers are the same for charities as they are for individuals, public or private sector organisations.”
The City of London Police and National Cyber Security Centre (NCSC) have since issued security advice, the key protection messages being:
- install system updates on all devices as soon as they become available
- install anti-virus software on all devices and keep it updated
- create regular backups of your important/business critical files to a device that is not left connected to your network, as any malware infection could be spread to other devices
- do not meet any stated demands and pay a ransom - this may be requested via Bitcoins (a form of digital or ‘crypto’ currency)
Additional technical guidance can also be found on the NSCS website (https://www.ncsc.gov.uk/guidance).
If you think you have been a victim of a cyber-attack, you should report it to Action Fraud by calling 0300 123 2040, or visiting the Action Fraud website (http://www.actionfraud.police.uk/).