Business Wire

FL-KNOWBE4

Share
KnowBe4 Finds State and Local Governments Struggle to Defend Against Ransomware and Business Email Compromise

KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, released a new report showing the continued impact cyber crime is having on state and local governments entitled “The Economic Impact of Cyber Attacks on Municipalities”.

KnowBe4’s report details the financial costs, reputational effects, level of public trust and other impact cyber attacks have on municipalities. The report breaks down the impact cyber attacks have into five target areas: the average financial loss from state and local governments, the denial of service to citizens due to financial loss, the frequency/types of attacks and the risk of recurring attacks, the challenge of allocating capital to prevent attacks and the decline of economic investment in municipalities.

Additionally, the new reports revealed ransomware continues to plague municipalities in all industry sectors. Business email compromise (BEC) attacks were also proven to be one of the most lucrative forms of cyber attacks in 2022, generating billions of dollars lost across all sectors and increasing across all sectors by 175%, with an 81% surge in 2022. State and local governments are particularly vulnerable to these attacks due to government transparency laws which allow cyber criminals to more easily tailor their attack to the victim.

Key findings from the report include:

  • Many municipality cybersecurity budgets are underfunded or do not exist at all. According to the National Association of State Chief Information Officers (NASCIO), most state cybersecurity budgets are between 0% and 3% of their overall IT budget. Additionally, only 18 states have a cybersecurity budget line-item and only 16% of states reported a budget increase of 10% or greater since 2018.
  • The 2022 IC3 Report reveals that in 2022, BEC attacks generated a total of $2,742,354,049 in losses across sectors, an increase of $346 million from 2021, and $875 million from 2020.
  • There are 1.7 million ransomware attacks every day, which means 19 ransomware attacks every second. Cybersecurity Ventures predicts that by 2031, ransomware will cost victims $265 billion annually, and it will attack a business, consumer or device every 2 seconds.
  • Ransomware attacks on state and local governments last an average of 7.3 days. Down time alone generates an average loss of $64,645.

In addition to state and local governments, educational institutions are also prime targets and victims of cyber attacks. In 2022, ransomware impacted nearly double the amount of universities and colleges than it did in 2021. Moody’s, which began tracking school districts in 2018, reports that the rates at which school districts are targeted has increased “exponentially”.

“Despite the many statistics and reports that detail the devastating losses caused from ransomware, business email compromise and other cyber attacks, many municipalities still find themselves underprepared for these threats,” said Stu Sjouwerman, CEO, KnowBe4. “Regardless of budget or size, the best way for all industry sectors to defend themselves against the threat of cyber attacks is to educate employees with new-school security awareness training and learn to develop a healthy skepticism of messages from even known contacts. Major municipality targets such as local and state governments and education and healthcare institutions are the backbone of civil service and society. Trained employees are essential to support IT teams, strengthen security culture and create a human firewall as the last line of defense to protect industries across the board, especially the municipality sectors we rely on everyday.”

To download The Economic Impact of Cyber Attacks on Municipalities report, visit https://www.knowbe4.com/hubfs/Economic-Impact-of-Cyber-Attacks-on-Municipalities.pdf.

To download KnowBe4’s Ransomware Hostage Rescue Manual, visit https://info.knowbe4.com/ransomware-hostage-rescue-manual-0.

About KnowBe4

KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, is used by more than 56,000 organizations around the globe. Founded by IT and data security specialist Stu Sjouwerman, KnowBe4 helps organizations address the human element of security by raising awareness about ransomware, CEO fraud and other social engineering tactics through a new-school approach to awareness training on security. Kevin Mitnick, an internationally recognized cybersecurity specialist and KnowBe4's Chief Hacking Officer, helped design the KnowBe4 training based on his well-documented social engineering tactics. Tens of thousands of organizations rely on KnowBe4 to mobilize their end users as their last line of defense.

To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.

View source version on businesswire.com: https://www.businesswire.com/news/home/20230329005253/en/

About Business Wire

Business Wire
Business Wire
101 California Street, 20th Floor
CA 94111 San Francisco

http://businesswire.com
DK

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

INNIO wins prestigious German Sustainability Award 20269.12.2025 09:07:00 CET | Press release

INNIO Group has been awarded the German Sustainability Award for Companies 2026. At the 18th annual ceremony in Düsseldorf, INNIO was named winner in the “Engines and Turbines” category within the “Machines and Installations” sector. Recognized as one of Europe’s most respected distinctions for corporate responsibility, the German Sustainability Award reflects the United Nations’ Agenda 2030 and thus on the key areas of transformation such as climate, biodiversity, resources, supply chain, and society. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20251205520809/en/ INNIO wins prestigious German Sustainability Award 2026 (c) Frank Fendler “This award is a tremendous recognition for our entire team and validates our 360-degree approach to sustainable innovation throughout the value chain,” said Marcin Kawa, VP Sustainability at INNIO Group. “We are committed to actively shaping the energy transition and delivering solutions th

EURONICS and NIQ Forge Strategic Collaboration to Elevate Retail Pricing Intelligence9.12.2025 09:00:00 CET | Press release

NIQ (NYSE: NIQ), a leading consumer intelligence company combined with GfK in 2023, has been selected by EURONICS, a leading global shopping cooperative in the Technical Consumer Goods (TCG) sector, to provide comprehensive Online Price Monitoring. NIQ's Online Price Monitoring provides insights into pricing dynamics by tracking item-level pricing across a defined data set. The system captures product information, matches items accurately, and ensures quality through advanced automated processes combined with human oversight and detailed checks. NIQ offers a range of retail pricing solutions, including pricing intelligence tools and the Consumer Price Lab, empowering businesses to make informed decisions and optimize their pricing strategies. This collaboration focuses on providing EURONICS with comprehensive pricing insights to support informed decision-making. NIQ delivers accurate and transparent data to help EURONICS understand market dynamics and plan effectively. "Through our col

SonicEdge and Earfab Partner to Shape the Future of Personalized Audio and Hearing Wellness9.12.2025 09:00:00 CET | Press release

Partnership unites SonicEdge’s micro-speaker technology with Earfab’s custom-fit innovation to deliver unmatched comfort and fidelity SonicEdge, a pioneer in micro-acoustic innovation, today announced a strategic partnership with Earfab, the innovator of custom-fit hearing technology, to co-develop a new generation of personalized audio solutions that unite comfort, precision, and hearing safety. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20251209472421/en/ Credit: SonicEdge By combining SonicEdge’s high-performance MEMS speaker-in-chip technology with Earfab’s custom-fit eartips – crafted using its proprietary earfabSCAN 3D smartphone scanning platform – the collaboration delivers a first-of-its-kind experience that redefines in-ear performance. The joint solution provides a perfect acoustic seal for enhanced sound fidelity, improved active noise cancellation, and long-term listening comfort – without compromising hearing

Outpost24 Acquires Infinipoint to Power Its Entry into the Zero Trust Workforce Access Market9.12.2025 08:00:00 CET | Press release

The strategic acquisition strengthens market leadership by unifying user identity with device trust, eliminating security blind spots. Outpost24, a leader in exposure management and identity security, today announced the acquisition of Infinipoint, a specialist in device identity, posture validation, and secure workforce access. The acquisition marks Outpost24’s entry into the Zero Trust Workforce Access market and enhances its identity security division, Specops, by laying the foundation for a unified approach that evaluates both the user and the device before access is granted. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20251208750630/en/ Ido Erlichman, Chief Executive Officer of Outpost24. As organizations advance their Zero Trust strategies, authentication alone is no longer enough. MFA and SSO confirm who the user is, but they do not validate the security of the device being used. In hybrid environments where employee

VSO Submits VCP v1.0 to Nineteen Regulatory Authorities Across Thirteen Jurisdictions and Completes First Integrated Evaluation in a Production-Like Environment9.12.2025 08:00:00 CET | Press release

The VeritasChain Standards Organization (VSO) announced today that it has submitted the VeritasChain Protocol (VCP) v1.0 to nineteen regulatory authorities across thirteen jurisdictions, including the United States, United Kingdom, European Union, Singapore, Hong Kong, United Arab Emirates (DIFC), Australia, India, South Korea, Switzerland, Brazil, Liechtenstein, and Saudi Arabia. The submissions present VCP v1.0 as a cryptographic audit framework designed to address emerging supervisory requirements under the EU AI Act Article 12 for logging and traceability, and MiFID II / RTS 25 for timestamp integrity and event ordering in AI-driven and algorithmic trading systems. VSO also confirmed the first completed integration of VCP v1.0 within a controlled, production-like evaluation environment operating under its Early Access Program. The environment successfully generated cryptographically linked event chains, immutable hashing, and verifiable proofs using RFC-aligned structures, demonstr

In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.

Visit our pressroom
World GlobeA line styled icon from Orion Icon Library.HiddenA line styled icon from Orion Icon Library.Eye