A cyber-attack can have disastrous consequences, particularly for SMEs. A recent study from the US’ National Cyber Security Alliance found that 60% of small businesses that suffer a cyber-attack are out of business within six months.

Commercial vehicles are getting more complex and more connected, which makes them more vulnerable to cyber-attacks. If your fleet management system isn’t secure enough, or if a telematics control unit isn’t protected properly, hackers could gain access to your system and your data…

What are the most common cyber-attacks?

• Email hacking/phishing – if someone in your company clicks on or replies to one of these, they may activate a Trojan horse software which will operate on their web browser. Mirroring the key strokes of the user, the malware will inform the hackers of passwords being typed in. This method has been used to illegally withdraw significant amounts from online bank accounts. In many cases, the financial institutions in question have not accepted liability.
• Email cloaking – an email is sent appearing to be from one of your employees requesting payment for an invoice which appears legit. The money is sent to the hackers account…
• Ransomware/Virus – like the ones who targeted the NHS last month, criminals working on the dark web have built sophisticated businesses with the sole aim of gaining control of companies’ technology networks and systems. They then send demands for payment in exchange for returning the status quo.
• Password theft/breach – that enables sensitive data to be accessed and released. A disgruntled employee at the supermarket Morrisons did just this in 2015, costing the firm over £2 million.
• Connected vehicles and the “Internet of Things” – this threat is particularly real to the automotive industry. Connected vehicles are, in essence, computers on wheels. They hold a tremendous amount of data and connect to multiple systems via telematics, the fleet management system or diagnostic port. Hackers can access the on-board system to infect your network. And vice versa…

How could cyber-crime cost you your business?

You might be:

• A commercial vehicle workshop owner, updating commercial vehicle software and plugging-in diagnostic equipment in your clients’ vehicles.
• A commercial fleet manager, sending out reminders to your clients that their vehicles require their periodic inspection.

In each of these cases, you handle data. In May 2018, the government will implement the General Data Protection Regulation (GDPR), a new regulation which will impose more severe penalties for non-compliance and data protection breaches. The most serious violations could result in fines of up to £15.8 million or 4% of the turnover – whichever is greater.

How can you protect your business?

There are several things you can do to reduce the risk of cyber-attack and data breach, for example:

• Review your passwords protocol, firewalls/email quarantining process and ensure you are doing regular systems back-up.
• Ensure vehicle software is up to date and be extremely careful when modifying it, or when connecting third-party devices to the OBD port of a vehicle.
• Be aware of who has physical access to the vehicle.

More information is available on the National Cyber Security Centre website: www.ncsc.gov.uk

Cyber insurance can help protect your business in the event of a data breach or a cyber-attack. You may also want the benefit of PR advice to minimise the impact on your firm’s reputation. The cost of this can also be included in your cyber insurance policy. Check here or call Plan to speak to an adviser: 0333 003 0043.

Read more… Cyber Crime: Is your company protected?