Cybercriminals continue to evolve their tactics, and recent incidents affecting Irish businesses and consumers highlight an important reality: many attacks no longer rely on technical hacking. Instead, attackers are exploiting trust, people, and business processes.  Below are three of the most significant threats currently impacting organisations across Ireland and the lessons they provide:

1. Revolut Data Disclosure Through Impersonation

One of the most widely reported cyber incidents in recent days involved Revolut. Criminals reportedly used a legitimate government agency email domain to submit fraudulent requests for customer information. As a result, sensitive customer data including identity documents was disclosed. Importantly, Revolut has stated that its systems and customer funds were not compromised.

How it happened

• A trusted source was impersonated Internal verification processes were bypassed

• Sensitive data was released without any system breach

• The lesson

How Unitec can help

• Security awareness training

• Email security and impersonation protection

• Verification and governance process reviews

• Incident response planning

2. Marks & Spencer Ransomware Attack

The 2025 attack on Marks & Spencer caused major disruption across online sales, logistics and operations. Security researchers reported that attackers gained access through social engineering techniques and helpdesk manipulation before deploying ransomware across critical systems. Customer information was also accessed.

How it happened

• Social engineering of support staff

• Credential compromise

• Privilege escalation

• Ransomware deployment

• The lesson

How Unitec can help

• Managed Detection & Response (MDR)

• Multi-Factor Authentication (MFA)

• Endpoint Detection & Response (EDR)

• Fortinet security solutions

• Backup and Disaster Recovery services

3. Toll, Banking and SMS Impersonation Scams

Irish consumers continue to be targeted by fake eFlow, banking and payment-related text messages designed to steal card details and login credentials. eFlow has repeatedly warned customers that it does not send payment links via SMS.

How it happens

• Fraudulent text message received

• Victim clicks a fake payment link

• Banking or card details are captured

• Accounts are used for fraud

How Unitec can help

• Security awareness training for employees

• Email and web filtering protection

• Microsoft security solutions

• User risk monitoring and reporting services