SUCCESS STORY
Camfed strengthens cyber awareness with Boxphish
Overview
Camfed, a global nonprofit supporting girls’ education across Africa, relies on digital platforms to manage student records, donor communications, and programme data. With staff and volunteers working across multiple countries and sites, the organisation faced increasing cyber risks, including phishing attempts, email scams, and ransomware threats.
To protect sensitive data and maintain smooth operations, Camfed partnered with Boxphish to implement a security awareness programme designed for the charity sector.
"Keep the updates coming – we love the new UI, new admin features and releases. We want them all!"
Tony Rafferty, Head of IT Systems | Camfed
Challenge
Camfed operates in a distributed, international environment where safeguarding student and donor data is critical. Key challenges included:
Protecting confidential student records and donor information.
Delivering training across staff and volunteers in multiple regions.
Reducing the risk of phishing and social engineering attacks targeting digital communications.
Ensuring training is engaging and practical without disrupting program operations.
Scaling awareness initiatives to cover a growing workforce and volunteer network.
Solution
The programme rolled out smoothly across all regions and teams. Staff and volunteers complete short, interactive modules and participate in phishing simulations reflecting realistic nonprofit scenarios. Automated onboarding ensures that new participants are trained immediately, maintaining consistent coverage and awareness across the organisation. Boxphish implemented a tailored, nonprofit-specific programme for Camfed:
Contextual training modules focused on phishing, ransomware, and data security relevant to education and nonprofit operations.
Simulated phishing campaigns mimicking donation scams, programme updates, and partner communications.
Interactive exercises and quizzes to reinforce learning in a practical way.
Automated onboarding to bring new staff and volunteers into the programme seamlessly.
Impact
The Boxphish programme delivered strong results for Camfed:
01.
Reduced operational cyber risk, safeguarding client shipment and operational data.
02.
Phishing simulation engagement revealed stronger staff vigilance across all teams.
03.
Training integrated seamlessly into busy workflows, fostering engagement without adding administrative burden.
04.
Embedded a culture of cyber awareness, with staff confident in spotting and reporting threats.
Standout features
Engaging, role-specific training for both office staff and field volunteers.
Phishing simulations based on real-world nonprofit scenarios.
Seamless onboarding for new staff and volunteers, ensuring continuous coverage.
Practical exercises that build awareness without disrupting day-to-day operations.
Measurable improvement in cyber security vigilance across the organisation.
Future outlook
Camfed will continue leveraging Boxphish to maintain high levels of cyber awareness across its teams and volunteers. By integrating proactive security practices into everyday workflows, the organisation ensures the protection of sensitive program and donor data while supporting its mission to empower girls through education.
KEEP UP TO DATE
See more case studies
Apr 9, 2026
Local Authority data breaches report: Q3 2025 (Nov 25 - Jan 26)
Apr 9, 2026
Retail data breaches report: Q3 2025 (Nov 25 - Jan 26)
Apr 9, 2026
Education data breaches report: Q3 2025 (Nov 25 - Jan 26)