Understanding that anyone can become a target of cybercrime is the first line of defence. If you or someone you know has been a target of a cyber attack at work, recognising that cyber attacks are not personal but rather opportunistic can help avoid feelings of self-blame.
What does a cyber attack look like?
There are multiple types of cybersecurity risks. Here are some which affect companies and their employees.
Social engineering attacks: Social engineering attacks are used to trick victims into revealing personal information through phishing scams or other ‘impersonations’ to make the scam look legitimate.
Ransomware attacks: Ransomware attacks, as the name implies, refer to a type of cyber-attack where hackers gain unauthorised access to an individual’s or organisation’s data and subsequently encrypt it, effectively holding it hostage. In these attacks, the attacker infiltrates a device or network and restricts access to the files, demanding a ransom payment in exchange for restoring access to the encrypted data.
Man-in-the-middle attacks (MiTM): A Man-in-the-Middle (MiTM) attack occurs when attackers position themselves between a user and an internet server, intercepting the communication between them. This enables the attackers to eavesdrop on sensitive information shared by the user, such as addresses, passwords, or other personal data. For instance, a hacker may create a deceptive Wi-Fi network that appears free to access, enticing unsuspecting individuals to connect and unknowingly share their information with the attacker.
What should you do if you’ve been targeted?
We talk a lot about the importance of keeping yourself safe online, but we don’t often talk about the personal fallout from experiencing cyber-crime. Several factors can influence a person’s vulnerability, including:
- Online activities
- Mental health history
- Personal traits
- Attitudes toward technology.
A victim of a cyber attack may lose more than money or dignity; they could also experience adverse psychological effects, such as anxiety or depression, shame and guilt, and reduced enjoyment of online activities they once trusted. In some cases, victims may experience symptoms of post-traumatic stress disorder (PTSD).
Some common responses include:
Anxiety: Cyber attacks breed uncertainty, and anxiety often takes centre stage. Victims might worry about the extent of the breach, the safety of their data, and potential consequences.
Loss of Control: Victims may feel helpless and powerless, as their personal information and privacy are exposed without their consent. This loss of control can be psychologically distressing.
Invasion of privacy: A cyber attack can trigger feelings of intrusion and violation, leading to a sense of vulnerability. The breach of your personal space can stir up complex emotions.
Anger and injustice: Victims may feel furious about being targeted by a faceless attacker. A sense of injustice can arise, especially when there’s little recourse to hold the perpetrator accountable.
Despair and hopelessness: Some victims experience a sense of hopelessness, doubting whether they can recover from the breach or safeguard their data in the future.
Sleep disturbances: Anxiety can manifest as sleep problems, with victims struggling to fall asleep or stay asleep due to racing thoughts about the attack.
Headaches and muscle tension: Stress from the attack can lead to physical symptoms like headaches, muscle tension, and even migraines.
Exacerbated health Conditions: Pre-existing health issues, such as chronic pain or autoimmune conditions, can worsen under the stress of a cyber attack.
If you experience a cyber attack at home or at work, it’s crucial to identify and report suspect activity, but it can also help to talk to your loved ones about your experiences, and consider seeking the help of mental health professionals. As an employee, you have the option of speaking to your EAP for extra guidance and advice.
How your EAP can help
As an employee, your EAP offers a safe and confidential space to discuss your experience of cyber attacks without fear of judgment. Though it can be hard to talk about, your EAP team is here to help in several ways:
Therapeutic intervention: Our trained therapists can guide you through the recovery process, helping you process emotions, manage anxiety, and develop resilience.
Psychological first Aid: EAPs can offer psychological first aid, which involves providing immediate support to help you cope with initial stress reactions.
Skill building: We provide tools for managing anxiety, promoting healthy coping mechanisms, and fostering emotional wellbeing.
Supporting yourself and your team
Cyber attacks should never be a source of shame or guilt for you or your team. They are often sophisticated and relentless, targeting even the most secure systems. Instead of harbouring feelings of self-blame, your team can work together to address the experience head-on.
Open communication: Encourage open dialogue about cyber attacks in the workplace. This can reduce stigma and encourage employees to seek help when needed.
Education initiatives: Provide employees with resources on recognising and responding to cyber attacks. Knowledge is a powerful tool in building resilience.
Flexible work arrangements: Offer flexible work arrangements, such as remote work or adjusted schedules, to accommodate employees dealing with the aftermath of a cyber attack.
Crisis response plan: Develop a comprehensive crisis response plan that outlines steps to take when a cyber attack occurs. This can help streamline support efforts.
EAP promotion: Actively promote EAP services to employees. Ensure they are aware of the resources available to help them cope with the psychological aftermath of a cyber attack.
In the wake of a cyber attack, you may grapple with a range of emotions and physical symptoms. Acknowledging the psychological impact, seeking professional support, and having a strong support network can make a significant difference in the recovery process.
