At Tabush Group, we're constantly evaluating how cyber threats are evolving and updating our practices to stay ahead of them.

A rising trend among cyberattackers is called help desk impersonation, and it's become one of the most popular ways to break into an organization. The 2026 RSA ID IQ Report, based on responses from more than 2,100 security and IAM professionals, found that identity-related breaches jumped from affecting 42% of organizations to 69% in a single year, with help desk social engineering identified as a major emerging attack vector. 65% of organizations said they are now seriously concerned about help desk attacks specifically.

In recent years, hundreds of millions of dollars have been lost across multiple industries due to these specific types of attacks. Help desks are a soft target because they're built to resolve issues quickly. Attackers know this, and they're exploiting it at scale.

What We're Changing At Tabush Group

When you call Tabush Group support, we'll verify your identity through a second factor before making changes to your account or systems. The check takes a few seconds. After that, support continues exactly as it always has.

Why This Matters Across Professional Services

Law firms, financial advisors, real estate firms, and construction companies are among the most targeted organizations by cybercriminals. These firms hold privileged communications, financial records, contracts, transaction data, and client information built up over years of trusted relationships. That data is extremely valuable, whether it’s sold, ransomed, or used for fraud.

According to Tabush Group's 2026 Survey on Law Firm Technology, reported data breaches at law firms doubled in a single year, from 6% of firms in 2025 to 13% in 2026, even as 92% of firm leaders report confidence in their cybersecurity measures.

Attackers adapt their methods constantly, and this change reflects how we adapt to meet them. Identity verification at the help desk is a direct response to how breaches are happening today.

Part Of A Layered Approach

This change is one piece of a broader security posture we build and maintain for every client. Our approach to cybersecurity combines monitoring, access controls, endpoint protection, and ongoing risk management because no single control stops every threat. Help desk impersonation has moved from rare to routine, and it's one of the few attack vectors that a simple, low-friction process can meaningfully shut down.

If you have any questions or concerns, we’re always here to help. Please reach out to your Client Manager.