Advancing UK Aerospace, Defence, Security & Space Solutions Worldwide
  • Home
  • /
  • Aerospace
  • /
  • Bridewell research reveals UK CNI ransomware risks

Aerospace Security

Bridewell research reveals UK CNI ransomware risks

Three-in-ten UK-based critical national infrastructure (CNI) organisations (30%) that have fallen victim to a ransomware attack have risked legal repercussions by paying a ransom.

Above: Click here to download Bridewell research paper, Cyber Security in Critical National Infrastructure Organisations: 2024.
Courtesy Bridewell

 
The findings are in new research by leading cyber security services firm Bridewell, surveying 521 staff responsible for cyber security at UK CNI organisations in sectors such as civil aviation, telecommunications, energy, transport, media, financial services and water supply.

Advertisement
ODU RT

 
Sixty per cent of organisations surveyed have experienced at least one ransomware attack over the previous 12 months. More than a third (35%) suffered up to five ransomware attacks, but a small percentage of organisations (2%) experienced more than a hundred attacks.
 
In certain situations, for example, when an organisation has no ability to recover from a successful attack, there may be no choice other than to pay the ransom. However, payment can risk infringing UK and US laws that prohibit dealings with sanctioned individuals or entities. In the UK, for example, payments could be in breach of the Sanctions and Anti-money Laundering Act 2018. Ransom payments could also incur financial penalties from the Office of Financial Sanctions Implementation. At present, prosecutions are uncommon, however the UK and US governments have floated the idea of implementing a payment ban.
 
The research findings expose the multiple consequences of a ransomware attack on UK CNI. More than a quarter of respondents, for example, cited a psychological impact on employees (27%).Disruption, (42%), downtime (40%) and data-loss (39%) are all repercussions that respondents say their organisations have suffered, along with reputational damage (35%).  
 
Yet almost a third of organisations (32%) are also facing increased insurance premiums and 34% have also incurred financial losses from legal fees or fines. The average cost of a ransomware attack on UK CNI organisations is now £295,230, the research reveals.
Advertisement
ODU RT

 
Impacts are exacerbated by the length of time it takes organisations to respond to ransomware attacks, with the average now being 11.4 hours. Without a proactive strategy to address this significant challenge of response-delays, more organisations risk paying a ransom.
 
Almost nine-in-ten (87%) UK respondents in the research agree that attacks are more sophisticated, with ransomware-as-a-service (RaaS) deployed with greater knowledge and cunning. Threats are on the rise through increasing professionalisation in the ransomware world and the entry of organised crime groups from other areas of criminality.
 
“If you fall victim to a ransomware attack, paying the ransom should always be your last resort. Aside from the risk that cyber criminals may not restore access upon payment, there are also potential legal consequences to consider,” said Anthony Young, CEO at Bridewell.
 
“That being said, there are certain situations where organisations have no choice other than to pay. If the organisation has no ability to recover, then paying the ransom may represent the only viable option to resume operations other than rebuilding their systems from scratch. However, this difficult choice is avoidable by having a security strategy to reduce the risk of threat actors gaining access and transversing through your systems without discovery and effective removal. Building a relationship with a trusted security partner who understands your environment and the complex challenges faced by critical infrastructure can help you mitigate this risk by having the right expertise, resources, and support if the worst was to happen.”

CNI cyber firm Bridewell is a UK cyber security partner for organisations operating within CNI, as well as companies in other highly regulated sectors who require the highest standards of cyber security.

Advertisement
Cranfield University
Farnborough Airport Continues Award Winning Streak for the 19th Consecutive Year

Aerospace

Farnborough Airport Continues Award Winning Streak for the 19th Consecutive Year

31 March 2025

Farnborough Airport, the Birthplace of British Aviation and Europe’s leading airport for premium air travel connectivity, has today announced that it has once again retained its number one position in the Aviation International News (AIN) FBO Survey 2025.

Sir Patrick Vallance hears from regional leaders at Cranfield University event

Aerospace Defence Events

Sir Patrick Vallance hears from regional leaders at Cranfield University event

31 March 2025

Recently appointed Oxford-Cambridge Innovation Champion and Science Minister, Lord Vallance was at Cranfield University earlier this month for a special roundtable event with business leaders, university representatives and local authorities from the central area of the corridor around Cranfield, Milton Keynes and Bedford.

GE Aerospace to invest €78m in European manufacturing

Aerospace

GE Aerospace to invest €78m in European manufacturing

28 March 2025

GE Aerospace plans to invest more than €78 million in its manufacturing sites across Europe during 2025, including €3.3 million in the UK.

GE9X engines to power Korean Air

Aerospace

GE9X engines to power Korean Air's 787-10s and 777-9s

27 March 2025

Following Korean Air's agreement to purchase 20 Boeing 777-9s and up to 30 787-10s, the airline has placed an order with GE Aerospace for GEnx and GE9X engines to power its new aircraft.

Advertisement
ODU RT
Birmingham Airport hosts SWAP to support local jobseekers

Aerospace

Birmingham Airport hosts SWAP to support local jobseekers

27 March 2025

Birmingham Airport is hosting a sector-based Work Academy Programme (SWAP) to support local residents into work.

NATS introduces world-first aircraft separation system at Gatwick

Aerospace

NATS introduces world-first aircraft separation system at Gatwick

26 March 2025

A new way of separating aircraft arriving into Gatwick Airport is set to cut carbon emissions by between 11,000 and 19,000 tonnes a year – and minimise delays - according to the air traffic management service, NATS.

Advertisement
ODU RT