Image: Don’t get caught up in an email hack (Getty Images)

Cyber insurance specialists Towergate Insurance are urging Northamptonshire businesses to strengthen their email security as hackers increasingly target inboxes to steal sensitive information.

Email accounts are often linked to online banking, shopping, social media, file-sharing platforms and business systems. This connectivity makes them an attractive entry point for cybercriminals, who can exploit compromised accounts to commit fraud, access confidential data and target contacts.

Marc Rocker, head of cyber at Towergate (soon to be rebranded as Everywhen), warned that once a hacker gains control of an email account, the consequences can escalate quickly.

“After gaining access to your inbox, it’s easy for a cybercriminal to build a detailed picture of your life and work,” he said. “They can impersonate you to trick clients or colleagues, sign you up for unwanted services that generate spam, or use your information for criminal activities on the dark web.”

Spotting the warning signs
According to Towergate, red flags that an account may have been hacked include: being locked out due to a changed password, finding unauthorised emails in the sent folder, contacts receiving suspicious messages from your address, multiple password reset requests from unfamiliar sites, and a sudden spike in spam.

Marc advised that speed is critical in reducing the damage. “If you think you’ve been hacked, you first need to work out how it happened — was it a phishing scam, a data breach, or an exposed list? Tools such as Have I Been Pwned or Norton Breach Detector can help identify where your information has been leaked,” he said.

Once the source of the breach is identified, users should check whether the affected organisation has issued guidance or taken action.

Steps to take immediately
Towergate’s recommendations include:

  • Changing the account password to a strong, unique one
  • Informing contacts so they can ignore suspicious messages
  • Checking account settings for unauthorised changes, such as email auto-forwarding to an unknown address
  • Enabling multifactor authentication
  • Installing antivirus software to detect malicious activity
  • In serious cases, creating a new email address and updating all linked accounts

“These simple measures can help contain the damage and reduce the risk of repeat attacks,” Marc said.

SMEs particularly at risk

Towergate also highlighted that many small and medium-sized enterprises (SMEs) in the region remain underinsured when it comes to cybercrime, despite relying heavily on digital systems for day-to-day operations.

Marc said the potential cost of a cyber incident — from lost business to regulatory fines — could easily exceed other risks that businesses routinely insure against. “It’s time to get real about cybersecurity,” he added.

To find out more about cyber insurance, call Towergate Insurance on 0330 029 5626 or visit our dedicated cyber insurance page at: www.towergate.com/more-products-and-services/cyber-data-and-crime-insurance/cyber-risk-management