Business Wire

FL-KNOWBE4

29.3.2023 14:01:30 CEST | Business Wire | Press release

Share
KnowBe4 Finds State and Local Governments Struggle to Defend Against Ransomware and Business Email Compromise

KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, released a new report showing the continued impact cyber crime is having on state and local governments entitled “The Economic Impact of Cyber Attacks on Municipalities”.

KnowBe4’s report details the financial costs, reputational effects, level of public trust and other impact cyber attacks have on municipalities. The report breaks down the impact cyber attacks have into five target areas: the average financial loss from state and local governments, the denial of service to citizens due to financial loss, the frequency/types of attacks and the risk of recurring attacks, the challenge of allocating capital to prevent attacks and the decline of economic investment in municipalities.

Additionally, the new reports revealed ransomware continues to plague municipalities in all industry sectors. Business email compromise (BEC) attacks were also proven to be one of the most lucrative forms of cyber attacks in 2022, generating billions of dollars lost across all sectors and increasing across all sectors by 175%, with an 81% surge in 2022. State and local governments are particularly vulnerable to these attacks due to government transparency laws which allow cyber criminals to more easily tailor their attack to the victim.

Key findings from the report include:

  • Many municipality cybersecurity budgets are underfunded or do not exist at all. According to the National Association of State Chief Information Officers (NASCIO), most state cybersecurity budgets are between 0% and 3% of their overall IT budget. Additionally, only 18 states have a cybersecurity budget line-item and only 16% of states reported a budget increase of 10% or greater since 2018.
  • The 2022 IC3 Report reveals that in 2022, BEC attacks generated a total of $2,742,354,049 in losses across sectors, an increase of $346 million from 2021, and $875 million from 2020.
  • There are 1.7 million ransomware attacks every day, which means 19 ransomware attacks every second. Cybersecurity Ventures predicts that by 2031, ransomware will cost victims $265 billion annually, and it will attack a business, consumer or device every 2 seconds.
  • Ransomware attacks on state and local governments last an average of 7.3 days. Down time alone generates an average loss of $64,645.

In addition to state and local governments, educational institutions are also prime targets and victims of cyber attacks. In 2022, ransomware impacted nearly double the amount of universities and colleges than it did in 2021. Moody’s, which began tracking school districts in 2018, reports that the rates at which school districts are targeted has increased “exponentially”.

“Despite the many statistics and reports that detail the devastating losses caused from ransomware, business email compromise and other cyber attacks, many municipalities still find themselves underprepared for these threats,” said Stu Sjouwerman, CEO, KnowBe4. “Regardless of budget or size, the best way for all industry sectors to defend themselves against the threat of cyber attacks is to educate employees with new-school security awareness training and learn to develop a healthy skepticism of messages from even known contacts. Major municipality targets such as local and state governments and education and healthcare institutions are the backbone of civil service and society. Trained employees are essential to support IT teams, strengthen security culture and create a human firewall as the last line of defense to protect industries across the board, especially the municipality sectors we rely on everyday.”

To download The Economic Impact of Cyber Attacks on Municipalities report, visit https://www.knowbe4.com/hubfs/Economic-Impact-of-Cyber-Attacks-on-Municipalities.pdf.

To download KnowBe4’s Ransomware Hostage Rescue Manual, visit https://info.knowbe4.com/ransomware-hostage-rescue-manual-0.

About KnowBe4

KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, is used by more than 56,000 organizations around the globe. Founded by IT and data security specialist Stu Sjouwerman, KnowBe4 helps organizations address the human element of security by raising awareness about ransomware, CEO fraud and other social engineering tactics through a new-school approach to awareness training on security. Kevin Mitnick, an internationally recognized cybersecurity specialist and KnowBe4's Chief Hacking Officer, helped design the KnowBe4 training based on his well-documented social engineering tactics. Tens of thousands of organizations rely on KnowBe4 to mobilize their end users as their last line of defense.

To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.

View source version on businesswire.com: https://www.businesswire.com/news/home/20230329005253/en/

About Business Wire

Business Wire
Business Wire
101 California Street, 20th Floor
CA 94111 San Francisco

http://businesswire.com
DK

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

Hytera Debuts SC700 Smart 4G Body Camera at CCW 202630.6.2026 11:30:00 CEST | Press release

Hytera, a leading global provider of critical communications technologies and solutions, officially debuted its SC700 Smart 4G Body Camera at Critical Communications World (CCW) 2026. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260630283236/en/ Hytera's latest SC700 Smart 4G Body Camera Public safety operations are increasingly moving toward real-time, connected workflows, where communication, video, and situational awareness are integrated to support a faster and more coordinated response in the field. The SC700 is designed to support this shift. It enables live video, location sharing and push-to-talk communication, helping connect frontline officers with control rooms. Integrated with Hytera HyTalk PoC System, it also supports communication across broadband and PMR users to improve coordination across teams. It also features Intelligent Scene Aware, which can detect abnormal situations such as man down, inactivity, or

Global Database Launches Regis, an AI Assistant for Live Company Registry Data30.6.2026 11:13:00 CEST | Press release

Regis gives business users a ChatGPT-like experience for company research, compliance checks, ownership discovery, financial analysis, and prospect list building — powered by live data from official government registries Global Database today announced the launch of Regis, a new AI assistant designed to answer business questions using live company data from official government registries. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260630229011/en/ Unlike general-purpose AI tools that rely on training data or open web sources, Regis is connected to Global Database’s structured company intelligence platform, covering more than 600 million company profiles, sourced from over 400 government registries across more than 200 countries. For more than a decade, Global Database has been collecting, structuring, and maintaining company data directly from government registries around the world. With the launch of Regis, the company

Kraken Goes Live on Trever to Bring Full-Service Prime Brokerage to European Financial Institutions30.6.2026 10:30:00 CEST | Press release

European banks, brokers and other licensed financial institutions using Trever can now access Kraken Prime’s institutional crypto trading and qualified custody Kraken Prime, the full-service prime brokerage offering trading, qualified custody and other financial services through an integrated platform, is now available through Trever, the operating standard in digital asset banking. Trever’s Digital Asset Operating System is used by financial institutions across Europe to manage the full digital asset lifecycle within a single environment – including trading, treasury, settlement and bookkeeping. From today, banks and brokers using Trever can route execution, settle into qualified custody, record all transactions and access other services through Kraken Prime without leaving their existing operational environment. The integration extends Trever’s connectivity, bringing a prime brokerage relationship into the existing workflows institutional teams use across their digital asset operatio

Microsoft Takes Sisvel Wi-Fi Multimode Patent Pool Licence30.6.2026 10:17:00 CEST | Press release

Microsoft has become a licensee of the Sisvel Wi-Fi Multimode pool. The US computer and software giant is the latest in a string of major companies to take a licence to the standard essential patents offered through the programme. In doing so, it joins ASUS, Hewlett Packard Enterprise and Sony Group Corporation, as well as Huawei, Panasonic, Philips and ZTE which are also pool licensors alongside KPN, Mitsubishi Electric, Orange, Aegis 11 (a Sisvel affiliate), SK Telecom and Wilus. The Sisvel Wi-Fi Multimode pool covers both Wi-Fi 6 and Wi-Fi 7 and offers an efficient way to access essential Wi-Fi rights for years to come. It was publicly launched in January 2026 as the successor to the Sisvel Wi-Fi 6 patent pool. Over a three-year period under that programme, agreements were closed with 40 companies, including Acer, Netgear, Cisco and HP. “It is a pleasure to welcome Microsoft as a licensee of the Sisvel Wi-Fi Multimode pool,” says Alex Debski, Director of Licensing and Counsel Legal

STOKR Secures CASP and PI Licences in Luxembourg Ahead of MiCAR Deadline30.6.2026 10:00:00 CEST | Press release

Authorised by the CSSF just before the 1 July 2026 enforcement deadline, STOKR joins a small group of crypto-asset firms cleared to operate across the EU under a single, harmonised regime. STOKR, the Luxembourg-based digital securities platform, has received authorisation from the Commission de Surveillance du Secteur Financier (CSSF) under the EU's Markets in Crypto-Assets Regulation (MiCAR) and the Law of 10 November 2009 on payment services, securing its Crypto-Asset Service Provider (CASP) and Payment Institution (PI) licences just over a week before MiCAR's 1 July 2026 enforcement deadline. Digital securities fall outside MiCAR's scope but the payment leg does not. To receive, hold, and transfer crypto assets and stablecoins on behalf of clients during subscription and redemption, a platform requires a CASP licence under MiCAR and a PI. Without both, a platform can issue digital securities but cannot move the capital. With MiCAR's transitional period ending on 30 June 2026, a sign

In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.

Visit our pressroom
World GlobeA line styled icon from Orion Icon Library.HiddenA line styled icon from Orion Icon Library.Eye