Family-office cyber security — 01
A Cyber & information security service
Erly Cyber is a cyber security diagnostic, audit, training, hardening and compliance partner for single and multi-family offices. We've worked inside family offices, so we know best where the gaps really are — and how to close them without slowing the family down.
The evidence — 02
Deloitte Private surveyed 354 single family offices worldwide, overseeing an estimated US$708 billion in assets, for its Family Office Cybersecurity Report 2024. The picture is of an industry being attacked far more often than it is preparing.
Read the Deloitte report (PDF)152 of 354 family offices
reported a cyberattack in the previous 12–24 months, up from 30% in 2021.
Each dot represents one surveyed single family office; counts are the reported percentages applied to the 354 respondents. Source: Deloitte Private, The Family Office Cybersecurity Report 2024 (survey conducted September–December 2023).
Among offices that were attacked, 93% saw phishing, 35% malware and 23% social engineering. Most attacks start with a person, not a server.
A third of attacked offices suffered loss or damage, most often lost confidential data and direct financial loss.
Offices above US$1 billion AUM were attacked more often (62%), and Deloitte warns that as they harden, criminals may shift to smaller, less-protected offices.
“Do not rely on yourself when it comes to cybersecurity.”
Real-world incident — 03
In January 2024, an employee at the Hong Kong office of a multinational company joined a video call that appeared to include the CFO and colleagues. They were AI-generated impostors, and the company lost about HK$200 million — roughly US$25 million at the time.
The company lost about
HK$200 million
Roughly US$25 million
at the time.
AI threat — 04
“…offense gets cheaper, more distributed, and more numerous, while defense stays expensive…”
Hoffman wrote his piece after an AI model under test broke out of its sandbox and ran tens of thousands of automated actions against a real platform. The lesson for families is simple: a tailored scam that once needed a skilled criminal's time can now be produced by machines, faster and aimed at far more targets at once.
Family offices are small teams guarding large, visible wealth. That makes them exactly the kind of target cheap, automated offense goes after first.
Services — 05
Most families start with a diagnostic. From there, take any stage on its own or work with us end to end.
A confidential maturity assessment across people, process and technology — covering the office, the principals and the advisers around them.
Short, practical sessions built on the scams that actually hit family offices, not generic corporate modules.
We fix what the diagnostic finds, in a way that fits how the family lives and works.
The plans and paperwork that let you respond fast, recover cleanly and show regulators, banks and insurers you are in control.
Diagnostic tool — 06
Built in-house to map exposure, identify weak points, and turn complex security signals into clear action.
Testimonials — 07
Family-office expertise — 08
A family office looks like a small business on paper. In practice it is a web of people, entities, homes, banks and advisers — and attackers know it. Securing it takes people who understand how it actually runs.
A staff member received an email appearing to come from her boss asking for gift cards. She couldn't reach him while he travelled, so she complied.
We design verification routes that work when the principal can't be reached.
An attacker used a family office CEO's compromised account to tell the family's banks his address and phone number had changed.
We agree call-back controls with every bank and set alerts on every account.
Malware arrived disguised as a message from organisers of a conference the CEO was speaking at, written specifically for his assistant.
We train the people closest to the principal against attacks built around the principal's diary.
Scenarios described by family office executives interviewed for Deloitte Private's Family Office Cybersecurity Report 2024.
Team — 09
We have sat in the seat. We know how investment memos, capital calls, LP reporting and family requests flow through an office — so we know where information leaks and money can be diverted.
Experience working on the investment team of a single family office, and building a community of 150 limited partners spanning single and multi-family offices.
Background in strategy consulting and banking, designing target operating models, compliance processes and institutional-grade infrastructure for funds.
A platform team covering cloud, DevOps and security, with specialties in ethical hacking and penetration testing, and hands-on experience building KYC and compliance platforms.
Erly Cyber was commissioned by the US government's CISA to create a graphic novel explaining how disinformation and cyberwarfare work.
Nothing about your family is discussed until you're protected.
No logos, no case studies without explicit consent.
We collect only what the work needs and return or destroy it after.
We recommend the right tools for your budget, not the ones we resell.
Advisor — 11
Former Accenture Executive, advisor to the Cyber Infrastructure Security Agency and PureVPN
Contact — 12
A confidential diagnostic gives you a clear risk picture and a 90-day plan. It starts with a 30-minute call under NDA.
