{"id":2452,"date":"2011-10-06T07:00:38","date_gmt":"2011-10-06T15:00:38","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=2452"},"modified":"2011-10-06T07:00:38","modified_gmt":"2011-10-06T15:00:38","slug":"security-2011-year-of-the-breach","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-2011-year-of-the-breach\/","title":{"rendered":"Security: 2011 – 'Year of the Breach'"},"content":{"rendered":"

Collin J. Zick<\/a>, lawyer at Foley Hoag LLP,\u00a0\u00a0wrote on the blog Security, Privacy and the Law<\/a> that 2011 is shaping up to be the “Year of the Breach<\/em>“. \u00a0 Zick lists the following major breaches that have occurred so far this year:<\/p>\n

Epsilon<\/a>: loss of customer email addresses<\/div>\n
RSA<\/a>: \u00a0loss of security tokens<\/div>\n
Citigroup<\/a>: loss of credit card numbers<\/div>\n
Sony<\/a>: loss of customer data<\/div>\n
Sega<\/a>:\u00a0loss of customer data<\/div>\n
ADP<\/a>: loss of benefits-administration data<\/div>\n
<\/div>\n
But that is only an abbreviated list. \u00a0Other high-profile breaches include:<\/div>\n
<\/div>\n
Bank of America<\/a> – data breach related to check scam<\/span><\/div>\n
Texas Comptrollers Office<\/a> – loss of personal identifying information<\/span><\/span><\/div>\n
New York Yankees<\/a> – loss of personal identifying information for fan base<\/span><\/span><\/div>\n
Fox Entertainment <\/a>– loss of personal identifying information<\/span><\/span><\/div>\n

And the list seems to go on. \u00a0Tom Murphy<\/a>, chief strategy officer at Bit9<\/a>, said that \u00a0“Breaches that occurred in the first half of 2011 have changed the rules of security by exposing high profile companies like RSA, Sony, Lockheed Martin and numerous others. \u00a0Our data finds that companies are increasingly worried about advanced persistent threat attacks, but they continue to engage in risky behaviors. Companies are gambling on a losing game by failing to put security policies in place. It\u2019s not a case of if a breach will occur, but when and how severe.”<\/p>\n

How are the breaches caused? \u00a0A 2011 Data breach report by Verizon<\/a> found the following breakdown for breach incidents:<\/p>\n