BEYOND TRANSACTIONS Cyber Security’s Impact on Brand and Reputation in Financial Services Institutions

S E C U R I T Y I N A C T I O N

PROTECTING AND ENHANCING THE BRAND

Introduction In today’s digital landscape, a financial services organization’s brand is one of its most valuable assets. A strong brand communicates trust, value, and stability. The increasing frequency and sophistication of cyber attacks (like phishing, ransomware, and impersonation fraud) poses a significant risk to brand integrity and customer trust.

Knowing these dynamics, the financial sector has become a favorite target for cyber criminals seeking to steal money or disrupt economic activity. The frequency of transactions, large numbers of account holders who access their balances remotely from apps, and the sensitive data held by these organizations make security an imperative.

The Cost of Data Breaches The financial impact of data breaches has reached alarming levels, with the average breach costing $5.9 million. In 2023, 72% of financial institutions reported experiencing a ransomware attack, with a quarter of them paying over $500,000 to bad actors in ransoms. Financial institutions faced an average of 1,162 cyber attacks per week in 2023, representing a 3% increase from the previous year.

Incidents like the December 2023 cyber attack at the Central Bank of Lesotho which disrupted the national payment system and prevented transactions by domestic banks demonstrates the potentially dire consequences of inadequate cyber security. Beyond the measurable impact of financial losses, institutions also face the more far reaching, hidden costs that come from reputational damage, loss of brand leadership, and lost opportunities.

Major Cyber Threats in Financial Services The financial services sector faces an evolving landscape of sophisticated cyber threats. Here are the most significant attack vectors targeting financial institutions:

• Ransomware Attacks: Ransomware has become increasingly prevalent in the financial sector, with 72% of institutions reporting attacks in the past year. These attacks encrypt critical financial data and systems, demanding substantial ransoms for decryption keys. The impact extends beyond immediate financial losses, often resulting in:

Cyber Security in 2023 for financial institutions: - 72% reported experiencing a ransomware attack - 1,162 average attacks faced per week - Average breach totaled $5.9 million Source: IDC CISO/CIO Thought Leadership Survey, March 2024 IBM. Cost of a Data Breach Report 2023, January 2024 Check Point. 2024 Cyber Security Report, January 2024

PROTECTING AND ENHANCING THE BRAND

- Disrupted banking operations and transaction processing

- Compromised customer accounts

- Leakage of sensitive financial data

- Significant recovery costs and operational downtime

• Business Email Compromise (BEC): BEC attacks represent a sophisticated form of social engineering targeting financial institutions’ email systems. These attacks typically involve:

- Impersonating executives to send authentic payroll requests

- Impersonating vendors to steal money from vendor’s customers

- Sophisticated social engineering techniques targeting financial staff

- Manipulation of vendor payment systems and processes

• Data Breaches: With financial institutions holding vast amounts of sensitive customer data, breaches can be particularly devastating. The average cost of $5.9 million per breach reflects the comprehensive impact:

- Exposure of customer financial records and personal information

- Regulatory compliance violations and resulting penalties

- Long-term damage to customer trust and brand reputation

- Extensive forensic investigation and recovery costs

• DDoS (Distributed Denial of Service) Attacks: DDoS attacks specifically target financial institutions’ online services and infrastructure, causing widespread disruption:

- Overwhelming of banking websites and mobile applications

- Disruption of critical transaction processing systems

- Prevention of legitimate customer access to accounts

- Potential cover for other concurrent cyber attacks

• Insider Threats: External bad actors aren’t the only source of threats. Insider threats originate from individuals with legitimate access to systems and data. These threats can be particularly damaging due to their privileged position within the organization:

- Unauthorized access to sensitive customer financial information

- Manipulation of internal systems and security controls

- Theft of proprietary information

- Intentional or unintentional exposure of confidential information

The convergence of these threats requires financial institutions to implement comprehensive security measures across their entire digital footprint. As demonstrated by incidents like the Central Bank of Lesotho attack, the impact of these threats can extend beyond individual institutions to affect entire financial systems.

PROTECTING AND ENHANCING THE BRAND

The Solution: A Holistic, Integrated Approach to Cyber Security To effectively protect their customers and their data, safeguard brand value, and secure the bottom line, financial institutions must adopt a holistic, integrated approach to cyber security.

1. Prevention-First Ransomware Protection

A ransomware attack penetrates an organization’s defenses through the web, email, or removable media devices. Without focused ransomware detection and prevention, there is a real risk of an attack bypassing existing security measures. Proper preparation and a zero-trust policy can dramatically reduce the risk and impact of a ransomware attack.

Check Point’s anti-ransomware solution defends organizations against the most sophisticated known, unknown, and zero-day ransomware attacks, and safely recovers encrypted data, ensuring business continuity and productivity.

With anti-ransomware, you can get:

• Complete endpoint protection at the highest security level that prevents the most imminent threats

• Fast recovery by automating 90% of attack detection, investigation and remediation tasks

Check Point Products:

2. Brand Impersonation Protection

The higher profile the organization the more attractive they may be to attackers who look to impersonate the brand. Defend against attackers who attempt to exploit your brand’s trust by impersonating your organization.

Harmony Email & Collaboration provides organizations with complete, full-suite protection that is constantly adapting to the ever-changing threat landscape. It provides security admins with an easy-to- deploy and manage platform, making security offerings easy and efficient:

• Blocks sophisticated social engineering attacks such as impersonation, zero-day phishing, and BEC using AI-trained engines

• Prevents advanced account takeover attacks by preventing unauthorized users and devices from accessing your email or productivity applications

Check Point Products:

PROTECTING AND ENHANCING THE BRAND

3. Secure Workforce Access

Securing employee access to mission-critical data and applications is complex. More sophisticated attacks leverage phishing, file sharing, mobile use, VPN, and app downloads. Detecting threats early, blocking infected devices, and preventing malicious downloads are critical to preventing threats from impacting your operations.

Check Point provides solutions that secure employee endpoints by:

• Providing secure access to corporate applications from any device, anywhere

• Removing risk through enforcement of consistent security policies for all workers

• Closing gaps from vulnerable home networks

Check Point Products:

Benefits of a Strong Cyber Security Posture By implementing a robust cyber security strategy, financial institutions can:

• Reduce risk to brand value and reputation

• Strengthen customer trust and loyalty

• Mitigate the risk of costly data breaches

• Lower costs and consolidate their security stack

Case Study: Canal Bank Secures Email with Check Point Harmony Email & Collaboration Canal Bank is a financial institution serving commercial clients across Panama’s nine provinces. The bank was in the process of implementing a new core banking system to support multiple channels and mobile applications, with a two-year roadmap to move all operations to the cloud. As part of this initiative, Canal Bank had already migrated their email platform to Microsoft Office 365 and needed to ensure robust security for their cloud-based services.

PROTECTING AND ENHANCING THE BRAND

Challenges: • Protect Office 365 users from cyber threats such as phishing, malware, and ransomware

• Protect the integrity of new core banking system and applications

Solution: Canal Bank implemented Check Point’s Harmony Email & Collaboration, a cloud service specifically designed to combat threats to cloud email and productivity suites.

Outcomes: • Stopped approximately 1,400 phishing attacks and 800 malware attacks in one year

• Gained thorough insights into threats targeting their email platform

• Consolidated their security architecture, providing real-time threat prevention against 5th generation cyber attacks

Summary Cyber security is a fundamental pillar of any modern brand and is especially important to protecting and maintaining brand value in the financial services industry. Financial institutions face mounting threats from sophisticated cyber attacks that can severely impact their operations, customer trust market reputation, and shareholder value. A comprehensive cyber security strategy, integrating prevention- focused solutions across all digital touchpoints, is essential for protecting assets, client data, and brand integrity.

Ready to elevate your cyber security strategy? Check Point Infinity Platform, trusted by leading financial institutions worldwide, delivers comprehensive protection across your entire IT infrastructure—from cloud to network to endpoint.

Learn more about the Check Point Infinity Platform or GenAI Security Solutions

Worldwide Headquarters 5 Ha’Solelim Street, Tel Aviv 67897, Israel | Tel: 972-3-753-4555 | Fax: 972-3-624-1100 | Email: info@checkpoint.com

U.S. Headquarters 100 Oracle Parkway, Suite 800, Redwood City, CA 94065 | Tel: 800-429-4391; 650-628-2000 | Fax: 650-654-4233

www.checkpoint.com

© 2024 Check Point Software Technologies Ltd. All rights reserved.

https://www.checkpoint.com/infinity/ https://www.checkpoint.com/solutions/genai-security/