One quarter (24%) of all ransomware incidents reported to Beazley Breach Response (BBR) Services – Beazley’s in-house breach response team – in the third quarter of 2019, were found to have started with an attack on an IT vendor or managed service provider (MSP).
The spike in these attacks contributed to an overall 37% increase in reported incidents of ransomware in Q3 compared to the previous three months.
Small businesses, which often depend on MSPs to remotely manage their IT infrastructure, reported 63% of all ransomware incidents to BBR Services in the first nine months of 2019. While their level of reliance on MSPs varies, many small businesses outsource their entire IT operation to the MSP. This can create a dependent and deeply interconnected relationship that hackers play to their advantage.
Katherine Keefe, global head of BBR Services, said: “IT vendors that supply small businesses often have clients that are wholly dependent on their expertise and availability to guide them through any IT issue, including a suspected or actual breach. When a vendor itself becomes the target of a ransomware attack, it can not only expose clients to the risk of a breach, but can leave them in the dark and without any IT support as the vendor battles with the initial breach and potentially exorbitant ransom demands.
“We help clients get their businesses back up and running as efficiently as possible when a breach occurs. But most important is to ensure that sensible, preventative steps are taken to reduce the risk of being hit by ransomware either directly or via a service provider.”
For advice for small businesses on how to vet a potential MSP, see the latest Beazley Breach Insights.