Insurance
Home›Insurance›Industry & Deals›Nonprofits face rising cyberattack risk, with donor da…
Nonprofits face rising cyberattack risk, with donor data at stake
Travelers says nonprofits can be hit because they hold monetizable donor and financial information, and AI-enabled attacks are increasing.
Insurance Business highlights why nonprofits are becoming more frequent targets for cybercriminals, pointing to how attackers first look for accessible network vulnerabilities and then evaluate which sensitive data they can monetize.
Travelers cyber risk product manager Erin Ramsey said attackers do not typically target specific organizations by revenue or profile, instead entering a network through weaknesses and then searching for data that a victim is highly motivated to protect. She added that nonprofit databases often include donor lists, pledged amounts, and bank account details, so breaches can create both financial damage and reputational fallout.
The article notes the threat has moved beyond suspicious emails, with attackers using AI to replicate voices and appearances and potentially deploy audio and video deepfakes. Travelers cited a 2024 example in which Arup lost US$25.6 million to a deepfake attack involving AI-generated participants on a video call.
Travelers also referenced IBM findings that one in four malicious breaches last year were AI-enabled, up 56% year over year, and warned that donor trust can erode after a cyber event. According to the report, donors who learn their personal data was compromised may stop giving, undermining fundraising stability for organizations that rely on sustained contributions.