Some companies unable to secure your data
It’s sad, but true. Some companies are just plain irresponsible with your data. Whether it be credit card information, or address and phone number there are those that aren’t good about keeping their databases private. The securityfix is reporting that a recent survey found 12% of people had been notified by companies that they did business with over a breach of security resulting in data loss. Apparently 20% of those, closed accounts subsequently.
Companies claim an average loss of 2.5%, ranging as high as 11%. In some cases, we have limited choices, but I would be eager to track down alternative choices if a company I had accounts with “lost” my data to information thieves.
Also, in another survey it’s said the cost “TO BUSINESSES” for a security breach averages around $14 million. (I wonder how much it winds up costing customers in time spent changing account information, calling credit companies to notify of suspicious charges from the breach… I doubt there’s any way to put a price on that…) Businesses were found to be four times more likely to lose customers if they failed to inform them of the breach in a prompt manner. Which I think is good to see, maybe that can be encouragement to companies to come clean once they discover something is wrong.
I have respect for companies that respond quickly to even suspected security breaches. As well, it’s a mark of character I think for them to fess up and detail to customers what has been found and what is being done to solve it, even if it’s a relatively minor issue. I remember an incident recently with Verizon wireless’ website, where a programmer had discovered that once logged in it might be possible to get other users account information. Verizon responded very quickly with an audit of their pages, closing that flaw and finding and fixing one or two others. I was somewhat impressed. (Unfortunately, I rather expected more of a “what was he trying to do” point the finger of blame elsewhere approach.)
Popularity: 1% [?]
Related Posts - The ways data is stolen.. Brian Krebs highlights a study on data theft/breaches. There are some interesting results (just 1/3 of data breaches were from criminal hacking, 29% from stolen laptops or storage media, 23% from improper disclosure of information (oops I published all our customers information on the website.) and 7% from inside sources......
- Ernst & Young loses laptop, exposes almost 250k hotels.com customers - database mayhem roundup The Register is reporting on Ernst & Young's loss of a laptop which had information on around 243,000 hotels.com customers. Apparently Hotels.com was notified on May 3rd. Apparently the laptop made use of a password as the only security measure. From the article.... "Recently, Hotels.com was informed by its outside......
- The perils of Metadata in documents Loose lips sink ships, so the old saying goes. These days documents are emailed back and forth and many times, revisions are made to "polite the text" up or "sanitize" or "redact sensitive information". With many file formats though, the metadata about the revisions (or even the old versions of......
Related Websites - Microsoft Security Advisory (2286198): Vulnerability in Windows Shell Could Allow Remote Code Execution Vulnerability in Windows Shell Could Allow Remote Code Execution Published: July 16, 2010 Version: 1.0 General Information Executive Summary Microsoft is investigating reports of limited, targeted attacks exploiting a vulnerability in Windows Shell, a component of Microsoft Windows. This advisory contains information about which versions of Windows are vulnerable as......
- Need A Good Domain Name - But Which One? Do you need an ideal domain name? Are you looking for a good domain name? Well then, here are a couple of the top tips you can use to find the domain name that's best suited for your marketing purposes. Here we go. A common question regarding domain name buying......
- Hackers Are At Work Both Online And Offline The overall focus of data security SMEs and even private parties when it comes to protection of their private information is on the virtual world, not the real world. But there are plenty of instances of hackers both online and offline to successfully intrude into an institution, government, company or......
Similar Posts
- NY requires businesses to disclose security breaches.
- Federal requirement to disclose database security breaches?
- How embarrasing… Computer security firms database hacked
- AT&T has info on 19,000 stolen
- Atlantis resort in the Bahamas loses customer information…