{"id":2003,"date":"2011-03-30T07:00:43","date_gmt":"2011-03-30T15:00:43","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=2003"},"modified":"2011-03-30T07:00:43","modified_gmt":"2011-03-30T15:00:43","slug":"security-malicious-data-breaches-expensive-and-on-the-rise","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-malicious-data-breaches-expensive-and-on-the-rise\/","title":{"rendered":"Security: Malicious Data Breaches Expensive, and on the Rise"},"content":{"rendered":"

Security lapses or data breaches involve the exposure of information to unprivileged individuals. \u00a0Data breaches sometimes happen inadvertently, typically as a result of user error or software flaw, but data breaches can be and frequently are malicious. \u00a0While no type of data breach should be tolerable, recovery from inadvertent breaches is typically less costly than from a malicious one.<\/p>\n

An annual study by the Ponemon group<\/a> tries to quantify the extent of the costs and frequency of data breaches. \u00a0The annual update to their study has recently been made available, and the numbers are troubling. \u00a0The cost of recovering from a single data breach has jumped 7 percent from the previous year to more than $7.2 million with an average cost of $214 per compromised record.<\/p>\n

The Ponemon study found that the biggest cause of breaches was simply negligence. \u00a041 percent of breaches were attributed to employee negligence. \u00a0Poor planning and poor controls often account for inadvertent errors to occur.<\/p>\n

Nearly 31 percent of data breaches were the result of a malicious attack. \u00a0That number has been climbing dramatically over the past two years. \u00a0In 2009, 24 percent of data breaches were malicious, and in 2008, only 12 percent were malicious. \u00a0Malicious breaches were generally either the result of malware infiltrations or via the lower-tech route of social engineering. \u00a0Recovery from malicious data breaches by far are most costly than recovery from a breach that is inadvertent.<\/p>\n

Much of the cost involved in recovering from a data breach involves sending notification to individuals whose information has been compromised. \u00a0Many new regulations, such as HIPAA and HITECH, require organizations to notify individuals promptly when a breach occurs, or else be subject to high fines for slow action. \u00a0Interestingly though the report found that organizations that respond too quickly often ended up paying more because they often overestimated the extent of the problem and even notified people that may not have been effected by the breach. \u00a0It is important to not to be slow to respond, but it is also important to try to gather as full a picture of the nature and extent of the breach before devising a remedy for it.<\/p>\n

The Ponemon report also showed that many organizations \u00a0are beginning to realize the extent and impact that a data breach can have on both their reputation and their bottom line. \u00a0For example, proactive investment in tools to prevent data breaches has risen by 72 percent. \u00a0The cost saved in preventing a single data breach can easily cover the costs of investment in preventative tools.<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Security lapses or data breaches involve the exposure of information to unprivileged individuals. \u00a0Data breaches sometimes happen inadvertently, typically as a result of user error or software flaw, but data breaches can be and frequently are malicious. \u00a0While no type…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-2003","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2003","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=2003"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2003\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=2003"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=2003"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=2003"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}