Public sectors are under pressure to secure digital assets against relentless attempts by cybercriminals. Specifically, incidents of ransomware and data breaches have been reportedly on the rise in recent years. Failing to safeguard digital assets can lead to data breaches, which undermine public confidence in authoritative bodies.  In this article, we explore the worrying trend of cyber threats that the public sector faces and possible solutions. 

The rising trend of cyber attacks on the public sector

In August 2024, the IHECS (Institut des Hautes Études des Communications Sociales) fell victim to a ransomware attack. As a result, some of the data was permanently deleted, causing operational disruptions to the institution. In another separate incident, one of the suppliers of the City of Brussels was hit in an attack, compromising sensitive information related to early childhood care.

The back-to-back incidents underscore the grave risks that public administrators face against bad actors. They also reflect the findings in ENISA Threat Landscape 2024, which observed the public sector reporting the most cyber incidents compared to other industries.

Despite their best efforts, government agencies continue to be targeted by adversaries, often from hostile states. On top of existing security measures, administrators can further strengthen to protect data centers and other digital assets by raising the bar for attackers. And that calls for effective and proactive countermeasures.

How ransomware and data breaches affect public sectors

In a typical ransomware attack, hackers would encrypt data they stole and extort the government for an enormous sum. Despite paying the ransom, some perpetrators would still release sensitive data to the public. Such fallouts can have rippling effects, ranging from service disruption to loss of trust.

Whether the victims are local municipalities or national agencies delivering critical services, recovering from such attacks is challenging. Authorities must grapple with operational delays, undermine public trust, and exposure of personal data. Worse, if the breaches impact military, health, or other key public service agencies, authorities could face national security and public safety risks. 

Sometimes, the impact reverberates across the entire region, such as the data breach incident that affected the EU Agency for Law Enforcement Training (CEPOL) in May 2024. Despite prompt detection, the agency’s security team couldn’t accurately assess the damage and had to surmise that all sensitive data were compromised. 

Securing public sectors from cyber threats

With so much at stake, public administrators ought to strengthen their security posture. Allocating a substantial budget for cybersecurity is a start. More importantly, implementing these practices helps public administrators mitigate ransomware and other threats more effectively.

• Educate public service workers of all levels to increase their awareness of security practices.
• Implement cyber security policies and enforce them across all departments and chains of command.
• Comply with cyber security acts, such as the NIS 2 directive, which aims to standardize cyber security measures and response in the EU region.
• Adopt and upgrade threat detection, patch management, and other cyber security solutions. 

Ultimately, there’s no quick answer to stemming the threats besieging public sectors, but taking proactive measures helps in protecting public trust.

If you’ve yet to do so, you can start securing your digital assets, and SecTeer is ready to help. Our automated patch management solution helps government agencies identify software vulnerabilities and prevent bad actors from exploiting them.

Talk to us now.