Norfolk council alarmed by staff falling for fake phishing email

Summarised from 2 outlets · Updated 24 Oct, 09:32 · Archive

Norfolk County Council sent a fake phishing email to test staff and councillors' security awareness, alarming leaders at how many fell for it.

Norfolk County Council sent a fake phishing email to staff and councillors as a test of their cybersecurity awareness. The test was prompted by concerns over cyber threats facing the authority. Officials reported being alarmed that 'too many' fell for the simulated attack, though they have not revealed the specific number who failed to recognise it.

Phishing attacks, where criminals send emails designed to trick recipients into revealing sensitive information or installing malware through clicking links, are identified as one of the principal cyber threats facing the council. The test email included a link to assess how well staff and councillors could spot such attempts.

Liberal Democrat county councillor Sue Catchpole raised the issue at a recent cabinet meeting, asking how well the council performed and what measures are in place to prevent IT system failures. Jason Butler, the council's cabinet member for efficiency, performance and pensions oversight, responded that all staff and members are required to complete mandatory training in information governance and data security.

How it is being reported

• Council cyber attack fears after 'too many' failed to spot fake phishing email'Too many' Norfolk County Council staff and councillors failed to spot a fake email designed to test the authority's security defences, say leaders.Norwich Evening News · 24 Oct, 09:00
• Council cyber attack fears after 'too many' failed to spot fake phishing email'Too many' Norfolk County Council staff and councillors failed to spot a fake email designed to test the authority's security defences, say leaders.Eastern Daily Press · 24 Oct, 09:00

In this story: Norfolk County Council · Sue Catchpole · Jason Butler · Norfolk

This summary was written by AI from the headlines and standfirsts above, and states as fact only what at least two outlets report. How we use AI · Report a problem