Skip to content

What Strata Managers Can Learn from the SSKB and Strata Plus Ransomware Attacks

Ransomware is no longer a distant threat for strata management companies. When cyber criminals target a strata firm, they are not just chasing data, they are disrupting communications, delaying operations, and exposing the personal and financial information of owners, tenants, contractors, and committees.

Microsolve helps strata businesses move from reactive concern to practical protection. Our approach combines strategy, compliance, and day-to-day management so your team can keep working while your cyber posture gets stronger.

What Happened?

The SSKB and Strata Plus attacks showed how quickly ransomware can overwhelm a strata business. SSKB reported that 200GB of data was stolen in a LockBit 3.0 incident in 2022, while Strata Plus was hit by Maze ransomware in 2020. Both events compromised customer information, disrupted operations, and became public examples of how exposed strata firms can be.

For strata managers, the lesson is straightforward: your business may not be a headline target until it suddenly is. Once attackers get in, they look for weak access controls, unpatched systems, poor backup discipline, and staff who are under pressure and moving quickly.

A ransomware attack can turn from a technical incident to a business-wide crisis in no time. Protect yourself from outcomes like these:

Data Stolen

Sensitive owner, tenant, and business information is taken and may be exposed or sold.

Operations Disrupted

Day-to-day work slows or stops as staff lose access to systems, files, and communications.

Reputation Damaged

Trust is eroded when clients, committees, and stakeholders see the firm in the news or dealing with a breach.


Could SMB1001 Have Helped?

assess your cybersecurity position to protect against ransomware attacks

SMB1001 addresses the kinds of controls that would have reduced the impact of both attacks. Firewalls, antivirus, automatic updates, staff training, backup and recovery, and access management all directly map to the common attack paths used by ransomware operators.

The strength of SMB1001 is that it is not just a technical checklist. It creates a repeatable way to prove that the basics are in place, maintained, and understood across the organisation, which matters when your team is dealing with multiple schemes, constant email volume, and time-sensitive requests.

A simple example: if an attacker compromises one account through a phishing email, MFA, least-privilege access, patching, and strong backups can limit how far they move and how much downtime follows. That is the difference between a manageable incident and a major business interruption.

Ready to Strengthen Your Cybersecurity?

Start with an SMB1001 Rapid Assessment to identify security gaps, prioritise improvements, and build a practical compliance roadmap.

Protecting Your Strata Company

Microsolve’s managed SMB1001 program implements these controls methodically and keeps them current. That matters because cyber security is not a one-off project, but an ongoing operating discipline that has to stay aligned with your people, your systems, and your compliance obligations.

We help strata companies assess their current position, close the gaps, document the controls, train staff, and maintain momentum toward certification. The result is a stronger, more visible security posture without forcing your internal team to become cyber security specialists.

Assess

Microsolve audits your existing cybersecurity controls against SMB1001 requirements. We identify gaps in firewalls, access management, backups, policies, and staff awareness - delivering a clear roadmap within 2 weeks.

Implement

We configure technology (MFA, Defender, backups), document policies, and train staff through short, practical sessions. Phased rollout ensures no disruption to scheme management.

Certify

Microsolve coordinates your CyberCert assessment. From self-attestation (Bronze) to external audit (Gold+), we prepare documentation and evidence. Certification badge proves your security maturity.

Maintain

Ongoing monitoring, quarterly reviews, and annual recertification keep you compliant as threats evolve. Staff refreshers and Secure Score tracking included.

Don't wait for an attack - start your SMB1001 certification now!

Book an assessment with Microsolve to understand your current controls, your gaps, and the fastest path to stronger protection.

Frequently asked questions

How did the SSKB and Strata Plus attacks affect strata firms?

Both attacks caused major operational disruption and exposed sensitive customer data, showing how ransomware can affect service delivery, trust, and compliance at the same time.

What SMB1001 controls matter most for strata companies?

The most important controls are firewalls, antivirus protection, automatic patching, staff awareness training, backup and recovery, and strict access management.

Why is SMB1001 a good fit for strata management?

Strata companies handle large volumes of personal, financial, and correspondence records, so they need a practical framework that improves security without requiring enterprise-scale internal IT teams.

Can Microsolve help with SMB1001 certification?

Yes. Microsolve runs a managed SMB1001 program that guides implementation, documentation, training, and ongoing maintenance.

{ "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "How did the SSKB and Strata Plus attacks affect strata firms?", "acceptedAnswer": { "@type": "Answer", "text": "Both attacks caused major operational disruption and exposed sensitive customer data, showing how ransomware can affect service delivery, trust, and compliance at the same time." } }, { "@type": "Question", "name": "What SMB1001 controls matter most for strata companies?", "acceptedAnswer": { "@type": "Answer", "text": "The most important controls are firewalls, antivirus protection, automatic patching, staff awareness training, backup and recovery, and strict access management." } }, { "@type": "Question", "name": "Why is SMB1001 a good fit for strata management?", "acceptedAnswer": { "@type": "Answer", "text": "Strata companies handle large volumes of personal, financial, and correspondence records, so they need a practical framework that improves security without requiring enterprise-scale internal IT teams." } }, { "@type": "Question", "name": "Can Microsolve help with SMB1001 certification?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Microsolve runs a managed SMB1001 program that guides implementation, documentation, training, and ongoing maintenance." } } ] }