Barracuda Survey Finds Education Faces High Email-Driven Ransomware and Account-Takeover Rates
Summary
Barracuda threat data and a survey of 113 education-sector IT and security leaders found frequent phishing, elevated email-driven ransomware and account takeover, and slower incident investigation and recovery than overall averages.
Key points
- Barracuda detected 58.8 million phishing emails targeting 536 educational institutions over three months, equivalent to about 1,200 per institution per day.
- In a survey of 2,000 IT and security leaders, including 113 from education, 77% of education respondents said their institution had experienced an email security incident in the past year.
- Education respondents reported email-started ransomware at 38%, versus 28% overall, and account takeover at 27%, versus 20% overall.
- Education respondents were less likely than the overall group to report investigating incidents within a day (58% versus 66%) or restoring accounts and operations within a day (56% versus 64%).
- Eighteen percent of surveyed education institutions said restoring normal operations could take up to a week, double the overall figure of 9%.
- Respondents cited user behavior and human error, incident-response expertise gaps, and difficulty responding quickly as security challenges.
Article Details
- Publisher
- Barracuda Research
- Report Period
- Survey: preceding 12 months; phishing telemetry: three-month period
- Scope
- Email threats and incident response and recovery in the education sector
- Sample Size
- Phishing telemetry covered 536 educational institutions; survey included 2,000 IT and security leaders, including 113 from education.
- Key Statistics
- 58.8 million phishing emails were detected targeting 536 educational institutions over three months, equivalent to around 1,200 per institution per day.
- 77% of education respondents said their institution had experienced an email security incident in the preceding 12 months.
- Education respondents reported email-started ransomware incidents at 38%, compared with 28% overall, and account takeover at 27%, compared with 20% overall.
- 18% of surveyed education institutions took up to a week to restore normal operations, compared with 9% overall.
- Within one day, 58% of education respondents said they could investigate suspicious email activity, and 56% could secure accounts and restore operations.
- Recommendations
- Use integrated AI-powered security to reduce pressure on overstretched teams, improve incident decision-making, and accelerate response.
- Shorten the time between detection and recovery to reduce the likelihood that email threats escalate into major incidents.