{"id":97916,"date":"2021-08-18T08:58:32","date_gmt":"2021-08-18T07:58:32","guid":{"rendered":"https:\/\/www.pbctoday.co.uk\/news\/?p=97916"},"modified":"2021-08-18T08:58:32","modified_gmt":"2021-08-18T07:58:32","slug":"ransomware-for-construction","status":"publish","type":"post","link":"https:\/\/www.pbctoday.co.uk\/news\/digital-construction-news\/construction-technology-news\/ransomware-for-construction\/97916\/","title":{"rendered":"The rising ransomware threat for construction"},"content":{"rendered":"

Architecture, engineering and construction firms are twice as likely to face ransomware attacks as other industries, according to new research<\/h2>\n

The threat, scope and impact of ransomware attacks<\/a> is growing \u2013 and, alarmingly, a new report has warned that companies in the architecture, engineering and construction sector are more than twice as likely to fall victim these attacks as firms in other sectors.<\/p>\n

The report<\/a>, by cloud content security and governance specialist Egnyte<\/a>, found that almost a third (31%) of AEC firms that were victims of ransomware were attacked at least twice within a 16-month period \u2013 and a small number were targeted even more frequently.<\/p>\n

While it can be difficult to pin down how much ransomware is on the rise, Egnyte said all the indications point to a rapid increase in the number of attacks.<\/p>\n

It points to the 2020 FBI Internet Crime Report, which said the number of reported ransomware incidents rose from 2,047 in 2019 to 2,474 in 2020. Meanwhile, Cybersecurity Ventures predicted that in 2021, a business will be attacked by ransomware every 11 seconds.<\/p>\n

Figures from Ransomware Facts<\/a> show the government sector has the highest proportion of organisations reporting an attack in the past year at 15.4%, followed by manufacturing at 13.9% and construction at 13.2%.<\/p>\n

AEC ransomware threat<\/h3>\n

Egnyte\u2019s research found that within the study cohort, 28% of the total number of ransomware attacks detected were in the AEC industry, compared with 72% for all other industries combined.<\/p>\n

The report notes that AEC firms have several factors working against them that may contribute to the higher rate of targeting. They are schedule-driven and any delays to due lack of access to files will significantly impact on costs and damage their brand. Coupled with the industry\u2019s low profit margins, this could make AEC firms more likely to pay a ransom to get up and running again.<\/p>\n

Larger companies were found to be at a higher risk. More than a quarter (26%) of firms with more than 1,000 employees reported a successful ransomware attack, compared with only 1% of accounts in companies with fewer than 200 employees and 4% of accounts in companies with between 201 and 1,000 staff.<\/p>\n

This indicates that while larger firms are more likely to have relatively advanced cybersecurity awareness<\/a> and resources, they also have deeper pockets, making them a more attractive target, as well as more data in a lot more repositories, increasing the number of potential entry points and vulnerabilities.<\/p>\n

The damage caused by attacks<\/h3>\n

The damage caused to an AEC company\u2019s operations by a successful attack depends on how many files are affected and the criticality of those files.<\/p>\n

Egnyte found that, on average, 18,812 files were impact by an attack, with the minimum being 2,822 and the maximum topping 42,101. For scale, some of Egnyte\u2019s customers have hundreds of millions of stored files.<\/p>\n

The average time for an AEC company to resolve the issues caused by an attack is 155 hours. In many cases, firms can access their data much quicker but the average a company can expect to experience some disruption to its operations for 6.5 days. Globally, the average downtime due to ransomware is between 15 and 23 days, depending on industry, company size and other factors.<\/p>\n

Of the accounts that reported an attack, 31.6% were impact more than once, with 7.9% reporting four or more incidents in a 16-and-a-half month period.<\/p>\n

Ransomware protection<\/h3>\n

The report cautions that while there is no 100% guarantee of avoiding a ransomware breach, there are a number of best practices that can reduce the impact on operations and costs. Egnyte breaks these down into three phases: Identification, Containment and Eradication.<\/p>\n

Identification<\/h4>\n

The faster an attack is identified, the easier it is to limit the damage it can do. Preventative and automated detection capabilities include:<\/p>\n