Ben SnapeGlobal companies, including those in the UK, are facing a rise in sophisticated cyber and ransomware attacks that target sensitive data.
This is a relevant issue for architects, since you handle client designs and intellectual property. Sectors like healthcare and finance have been hit the hardest, but architectural firms are also at risk due to their reliance on digital workflows.
The UK government’s survey reported that 43% of UK businesses experienced a cyber breach or attack in the past year, with ransomware prevalence doubling from 0.5% in 2024 to 1% in 2025 (approximately 19,000 businesses).
Artificial Intelligence (AI), including large language models (LLMs), has surpassed ransomware as the top cybersecurity concern for IT and security leaders in 2025.
Small to medium-sized architectural firms are particularly vulnerable due to their limited cybersecurity budgets.
Phishing remains the dominant threat, with a 140% year-on-year increase in browser-based phishing attacks, relevant for architects receiving emails with project-related attachments.
Moreover, the following acts and regulations require that you implement sufficient security measures in your practice to comply:
- UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018
- Network and Information Systems Regulations 2018 (NIS2)
- Privacy and Electronic Communications Regulations (PECR)
- Proposed Cyber Security and Resilience Bill
- Data (Use and Access) Bill
PlanMan and cybersecurity for architects
We’ve designed PlanMan to help handle all aspects of UK architecture practice management, and cybersecurity is not an exception.
Below is a list of the most common attack vectors in UK architectural practices, accompanied with PlanMan’s features that take care of these threats.
Phishing attacks
Phishing remains the dominant cyber threat, with a 140% year-on-year increase in browser-based phishing attacks reported in 2025. Architects frequently receive emails with project-related attachments (e.g., CAD files, PDFs, or contracts), making them prime targets for phishing emails disguised as legitimate correspondence from clients or contractors.
Malicious Scalable Vector Graphics (SVG) files, often used in design workflows, have seen an 1,800% surge in phishing campaigns in early 2025.
Compromised accounts can lead to data theft (e.g., client designs or intellectual property), ransomware deployment, or unauthorized access to cloud platforms like BIM 360.
An architect might receive an email posing as a client requesting a design update, with a malicious SVG or PDF attachment that installs malware when opened.
PlanMan’s client portal allows clients and stakeholders to access updates, quotes, and documents directly, minimizing email-based communication vulnerable to phishing. For example, a client will reply to project updates within the portal instead of sending attachments via email – and that eliminates the phishing email risk.
Cloud-based platform vulnerabilities
Architectural firms heavily rely on cloud-based tools like Autodesk BIM 360, Revit, or ArchiCAD for collaborative design and project management. Misconfigured access controls, weak passwords, or unpatched software create entry points for attackers. The NCSC notes that cloud misconfigurations are a leading cause of breaches in SMEs.
Attackers can steal sensitive project data, manipulate designs, or lock access to critical files, disrupting project timelines and client trust. E.g. a poorly secured BIM 360 account with shared credentials could allow attackers to access all project files, leading to data leaks or ransomware.
PlanMan’s cloud platform centralised file storage, reducing reliance on fragmented tools like Google Drive or Dropbox, which can be vulnerable to misconfigurations. Its built-in encryption ensures sensitive data, such as client plans or financial details, is protected in transit and at rest.
Ransomware attacks
Ransomware prevalence in the UK doubled from 0.5% in 2024 to 1% in 2025, affecting approximately 19,000 businesses, per the UK Cyber Security Breaches Survey. Architectural firms are attractive targets due to their time-sensitive projects and valuable intellectual property (e.g., bespoke designs). Attackers exploit vulnerabilities in endpoints (e.g., design workstations) or unpatched software.
Ransomware can encrypt critical project files, halting operations and demanding payment for decryption. SMEs often lack tested backup procedures, increasing their vulnerability.
PlanMan’s cloud storage supports version control and secure backups, enabling architects to maintain copies of critical files (e.g., Revit models, PDFs) in case of ransomware. PlanMan’s cloud can serve as a secure secondary storage with version tracking to recover files.
Weak endpoint security on workstations and mobile devices
Architects use high-performance workstations for CAD and 3D modeling, often running outdated operating systems or unpatched design software. Remote work, common in hybrid architectural practices, increases risks as employees access systems from personal or unsecured devices. IoT devices, such as smart building sensors used in design projects, also introduce vulnerabilities, as noted in 2025 enterprise device security reports.
Compromised endpoints can serve as entry points for malware, data exfiltration, or lateral movement within a firm’s network.
PlanMan’s secure client portal uses multi-factor authentication (MFA) and encrypts data in transit with SSL/TLS, meeting Cyber Essentials’ requirements for secure data handling. This reduces risks when sharing sensitive project plans with clients or contractors.
Supply chain and third-party risks
Architectural firms collaborate with contractors, engineers, and clients, often sharing files through third-party platforms or relying on managed service providers (MSPs) for IT support. The proposed UK Cyber Security and Resilience Bill (2025) highlights risks in supply chains, as attackers increasingly target less-secure partners to infiltrate larger networks.
A breach in a third-party provider could expose sensitive project data or grant attackers access to the firm’s systems. Very often, a contractor’s compromised email account could send malicious files to an architect, bypassing basic email filters.
PlanMan allows architects to restrict file access based on roles (e.g., project manager, client, co-consultant), minimizing unauthorized access risks when collaborating with third parties.
Insider threats (accidental or malicious)
Architectural firms often have small teams with shared access to sensitive data, increasing the risk of accidental leaks (e.g., sending files to the wrong recipient) or malicious actions by disgruntled employees. The 2025 Cyber Security Breaches Survey notes that insider threats, while less common than external attacks, remain a concern for SMEs.
Insider threats can lead to the exposure of client data, intellectual property theft, or sabotage of project files. For example, an employee inadvertently shares a sensitive BIM model on an unsecured platform, exposing proprietary designs to competitors.
Always configure PlanMan to require MFA for all users accessing project data. Use the platform’s document management to encrypt and organize BIM and CAD files, and audit third-party access (e.g., co-consultants) via PlanMan’s permission settings.
PlanMan includes permission settings and project file storage. Set access carefully and include the software in your practice’s wider security procedures.
Start your free trial today and easy to use PlanMan is!