The soft target myth: how non-profits became prime adversary targets.

Real incidents: the cost of under-protection

• 515,000+

  records breached

  International Committee of the Red Cross (ICRC)

  A sophisticated, state-aligned intrusion compromised the personal data and confidential locations of over 515,000 vulnerable people fleeing war, disaster and persecution. The "Restoring Family Links" humanitarian pipeline was halted worldwide.

• 136

  countries paralysed

  SOS Children's Villages global outage

  Ransomware crippled child protection services and emergency relief across 136 territories. Aid workers were cut off from communication channels, food stipend disbursements and beneficiary safety registries for days.

• 0-click

  spyware targeting

  Human rights defenders and civil society

  Amnesty International and Citizen Lab investigations repeatedly uncover advanced commercial spyware implants weaponised against regional NGO directors, legal aid defenders and whistleblowers to intercept field operations.

Why adversaries target the sector

• Irreplaceable human data.

  Compromising an enterprise exposes credit cards, which are replaceable. Compromising an NGO exposes political refugees, abuse victims or undercover humanitarian workers, which is life-critical.

• The vendor pricing trap.

  Enterprise security vendors require 100+ minimum seat licences ($25k–$70k a year). NGOs run on tight grants with strict "overhead" caps, which forces them onto consumer antivirus.

• High organisational fluidity.

  Volunteers, field laptops, temporary staff and decentralised partner networks create massive, porous attack surfaces.

← Back to home