Cybercrime: Why Charities and Community Groups must act now (guest blog)

Cybercriminals don’t discriminate – Why Charities and Community Groups must act now.

Author: DCI Richard Morrison-Butcher  

Read on to find out about our upcoming event with The Cyber Resilience Centre.

Cybercriminals aren’t known for their generosity. In fact, charities and community groups are increasingly becoming prime targets for cyberattacks. Many organisations assume they are “too small” or “not important enough” to be targeted. The reality is very different. Charities are high-value targets. They hold sensitive personal data, manage significant funds, and rely heavily on public trust. A successful attack doesn’t just impact systems; it can directly affect the people who rely on your services. Recent figures show that around 28% of UK charities experienced a cybersecurity breach or attack in the last 12 months, that’s an estimated 61,000 organisations impacted in a single year. At the same time, cybercrime, and fraud now account for almost half of all recorded crime in England and Wales. The threat is not going away, and charities are firmly in the firing line. 

Why Charities and Community Groups are being targeted 

As charities grow and adopt digital tools, their exposure to cyber risk increases. Unfortunately, this is not always matched with increased cyber resilience. Cybercriminals actively look for organisations that, rely heavily on email and remote working, work with volunteers and distributed teams, operate with limited budgets or specialist cyber expertise and depend on trusted relationships with donors, partners, and beneficiaries. These factors make charities particularly vulnerable to social engineering attacks, especially phishing, which remains the single biggest cyber threat. 

The real impact of a cyber attack 

A cyber incident is rarely “just a technical issue”. For charities, the consequences can be serious and wide-reaching: 

Financial loss through fraud or ransomware 

Data breaches, exposing sensitive personal information 

Reputational damage, leading to loss of trust from donors and beneficiaries 

Regulatory consequences, including potential fines or reporting obligations 

Disruption to critical services, affecting vulnerable communities 

There is also a very real human impact, placing emotional and mental strain on staff, volunteers, and the people your organisation supports. 

Your Charity and Community Group matters, and so does its security 

Charities and community groups are a vital part of the UK’s social fabric. Yet many lack the time, resources, or confidence to tackle cybersecurity effectively. Too often, organisations only realise how exposed they are after something has gone wrong, when the damage is already done. The good news? You don’t need to face this challenge alone. 

How the Cyber Resilience Centre for London can help 

The Cyber Resilience Centre for London (CRC) understands the pressures of running a charity or community group. The CRC is a police-led, government-backed initiative designed to help small organisations strengthen their cyber resilience and protect themselves against cybercrime. We focus on providing: Clear, practical advice, not technical jargon, actionable steps you can implement straight away, and support tailored to organisations with limited time and resources. 

What you can access for free 

By engaging with the CRC, your organisation can benefit from: 

Fully funded cybersecurity awareness training for your team 

A free 1-to-1 cybercrime prevention discussion tailored to your needs 

A range of fully funded technical services 

A monthly newsletter with practical advice and threat insights 

Invitations to webinars, events, and community networking opportunities 

Take simple steps today 

Improving your cyber resilience doesn’t have to be complex or expensive. Small, proactive steps can make a significant difference in protecting your organisation. By joining the CRC community, charities, community groups, faith organisations, and social enterprises can: Reduce their exposure to cyber threats, build confidence in their digital operations, and protect the people and communities we all serve. Stronger cyber resilience equals stronger communities. Your organisation plays a vital role in supporting others. Protecting it from cyber threats is essential to continuing that mission. 

Join the London Boroughs Faiths Network alongside the Cyber Resilience Centre for London in this free webinar to learn more and take the first step towards a safer, more secure future:  

Date: 14/07/26

Time: 10am – 11am

Author: DCI Richard Morrison-Butcher