Cyber Security for Accountants & CPAs: Top Threats to Know in 2021

With 72% of tax-filing adults in the US expressing some level of concern over their personal data being compromised when they file taxes, accounting professionals need to carefully consider threats connected to software, hardware, and communications channels.

It’s difficult to quantify the impact of a cyberattack, but any attack must be considered a dangerous data breach. As a result, it is imperative to invest in the best cyber security options for accountants and accounting firms. CPAs, accountants, and bookkeepers are all attractive targets, as even the smallest firms possess valuable sensitive client data that cybercriminals can use to steal identities, create fraudulent tax returns, or drain life savings.

In this post, we’ll review cyber security in accounting and show how cloud hosting is one big step toward eliminating threats.

What Are the Biggest Cyber Security Threats to Accountants?

Cyber security for accountants should focus first on the key threats to the industry. The most common threat to accountants is malicious software, or malware. Around 91% of all cyberattacks start with a phishing email that entices you to open a link or attachment containing malware, according to the IRS. Once you download malware the attacker can steal passwords, track keystrokes, or gain access to sensitive client data in your computer systems.

Viruses

A type of malware that inserts itself in legitimate programs and self-replicates into other programs on the host system.

Ransomware

Malware that restricts access to software or client files until a ransom is paid. Ransomware is increasingly pernicious since attackers can hire a service to perform the ransomware attack, then demand payment in the form of cryptocurrency to keep their identity hidden. An Albany, New York-based accounting firm was hit with one such attack in December 2019. The attackers breached the firm’s computer network for three days before the firm noticed. They exposed confidential data of some of the accountancy’s healthcare clients, including names and dates of patients, and blocked access to the firm’s files.

Phishing

A type of cyber attack where an attacker masquerades as a legitimate organization or individual to dupe victims into opening a link or attachment that contains ransomware. In early 2021, the IRS warned tax professionals of one such email phishing scam that claims to be from “IRS Tax E-Filing.” The email asks tax professionals to reply with a copy of their driver’s license and Electronic Filing Identification Number (EFIN). The thieves could use this information to file fraudulent tax returns. The IRS also warns of a phishing scheme where cybercriminals pose as a potential client then send an email with an attachment they claim is their tax information, but in fact, is malware.

How Does Malware Enter Your Accounting System?

Office technology and staff behavior can present potential gateways for hackers and their malware. Proactive steps must be taken to close vulnerability gaps.

Vulnerable technology

Computers, laptops, smartphones, and wireless networks present exposure risk for accountancies. Client data stored on devices could be jeopardized if attackers gain access to the device by infecting it with malware. Using public WiFi networks to share work files also leaves them open to attackers, as public WiFi is notoriously vulnerable to hackers.

SMS

SMS texts lack end-to-end encryption, so if hackers attack the network used to send your messages, they can read the contents and steal sensitive data. Cell phone services including Verizon, T-Mobile, and US Cellular store the contents of texts for a period of time, presenting another layer of vulnerability. This means SMS is not a secure way to share sensitive client information.

Weak security at the email recipient’s end

Many email programs, including Gmail, automatically encrypt messages stored on their server. However, if your recipient’s email provider does not support encryption, your message could be exposed as it travels to their computer. Robust email security requires end-to-end encryption.

Weak passwords

Password reuse and weak passwords remain one of the most common cybersecurity vulnerabilities. Password manager NordPass found that the two most common passwords of 2020 were “123456” and “123456789.” Each of these passwords can be cracked in under a second using easily available password cracking software. Another danger is using the same password across websites. If a hacker cracks the password on one site, they may gain access to other accounts where you use the password.

Poor staff training

With the rise of remote work, cybersecurity training gains an extra level of complexity and importance. Employees often use the same devices for work and their personal lives, which creates potential security risks. They may use public wifi, which potentially exposes their devices to hackers. And they may not be aware of the basics of accounting cybersecurity.

Cloud-Hosted Accounting Software One of the Best Cyber Security Options for Accountants

Cyber security in accounting cannot be ignored. It’s critical, even mandatory, that you put in place a comprehensive cyber security plan for your accounting firm. But you’re not a cybersecurity expert — you’d rather devote your time to growing your business and solving problems for your customers.

A cloud-hosted accounting platform can counteract these threats. Sharing client data in a secure cloud environment is more secure than sending files through email. It helps keep data out of smartphone and laptop storage where it’s more susceptible to attack. A seasoned cloud hosting provider supports your move to a digital workplace while freeing you from the cost and headaches associated with maintaining your IT stack. Swizznet goes a step farther toward creating a secure environment by deploying CrowdStrike threat detection technology on all its shared and private cloud servers.

To read more about how Swizznet’s secure, enterprise-grade hosting helps you serve clients virtually while protecting their data, read our Tech Matters data sheet.

For a deeper look at top security threats accountants are facing and what you can do to get the best cyber security as an accountant, download our ebook here.

Wes Stillman, Chief Executive Officer, RightSize Solutions

“Really understanding the industry you serve is the only way to fully leverage technology.”

After 30+ years of managing technology in high-level positions, Wes began RightSize Solutions in 2002 because wealth management firms needed a technology partner who really understood their needs. More than 13 years later, he remains committed to understanding every nuance of his client’s businesses.

Prior to founding RightSize Solutions, Wes’ clients included major airlines, broker-dealers, trust companies, health care providers, community banks and other financial institutions. He has held high-level positions at National Advisors Trust Company, FSB, Comdisco, Midwest Consulting Group (Senior Consultant and Yellow Technology Services (Director of Technology).

A technology pioneer in every sense, Wes is regularly quoted as a subject matter expert in industry publications and also speaks to small and large groups on topics such as cybersecurity, cloud-based environments, and leveraging technology.

About RightSize Solution

A sister company in the Swizznet family, RightSize Solutions is headquartered in Lenexa, KS. Our company roots date back to 2002 and our focus is exclusively in the wealth management community. As a leading provider of IT Management and Cybersecurity, RightSize Solutions helps firms navigate the promise of technology to gain greater flexibility, lower costs and increase productivity. A hybrid of customized technology, proactive management and unrivaled service, we keep your systems securely running and your business soaring.