NS&I Blocks Over 132,000 Suspicious Emails Amid Rising Phishing Attacks

Mirror

NS&I Blocks Over 132,000 Suspicious Emails Amid Rising Phishing Attacks

First seen 10 May 2026, 03:34 UTC • •51.9

Article Content

1 / 5

Browse articles

ThreatCluster •May 11, 2026 at 03:33 UTC

•NS&I blocked over 132,000 suspicious emails in three years, with phishing attempts rising sharply.
•Approximately 37,000 customers were locked out of their accounts, impacting £476 million in deposits.
•Experts warn that AI-generated phishing tactics are increasingly being used by cybercriminals.

NS&I has issued a statement after blocking 132,126 suspicious emails over three years, including a sharp increase in phishing attempts from 1,043 to 4,414 in the last year. The blocked emails included spam, phishing, and malware. Approximately 37,000 customers were previously locked out of their accounts, affecting £476 million in deposits, particularly impacting bereaved relatives. Cybersecurity experts warn that AI-generated phishing tactics are increasingly being used to exploit vulnerabilities. NS&I emphasizes its commitment to security and robust processes to protect customer data. The organization clarified that the Freedom of Information request pertained only to inbound emails, not customer correspondence.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 180d ago How this analysis works

Timeline

2026-05-10

NS&I issues customer statement on blocked emails

NS&I reported blocking 132,126 suspicious emails over three years, with a notable rise in phishing attempts.

2026-05-10

37,000 customers locked out of accounts

A significant incident previously locked out approximately 37,000 customers, affecting £476 million in deposits.

More articles in this cluster (4)

Threat Graph

6 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Malware
Phishing
T1566 - Phishing

Organization (1)

NS&I

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Affected Platform (1)

Microsoft Edge

Relationships

Malware targets Microsoft Edge
Phishing targets Microsoft Edge
T1566 - Phishing targets Microsoft Edge
Malware related to NS&I
Malware related to CWE-200 - Exposure of Sensitive Information

Following this threat?

Track NS&I in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

North Korean Hackers Steal $6.3 Billion from Binance in Coordinated Attack On October 29, 2026, Binance suffered a large cyberattack attributed to North Korean hackers known as TraderTraitor, resulting in the theft of approximately $6.3 billion in cryptocurrency. The attackers gained initial access through social engineering tactics, including a fake job offer that led to malware…

Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…