Welcome Guest. | Log In | Register | Membership Benefits
  • |   Email this page E-mail
  • |  Print Print
  • |   Bookmark and Share

Study: The Aftermath Of A Breach

New Ponemon-Experian study highlights organizations' top priorities following a data breach

Jan 26, 2012 | 10:06 PM | 

By Kelly Jackson Higgins
Dark Reading
You've been breached: How do you minimize the fallout? Hiring outside legal help and assessing the damage to victims are the top two priorities, according to a new survey.

The newly released "Aftermath of a Data Breach" report from Experian and the Ponemon Institute surveyed IT security pros about a data breach they felt had the biggest impact on their organizations, both financially and reputationally.

Just half of the respondents said their organizations had done all they could to shield customer data, and 56 percent said retaining legal counsel was a priority, followed by analyzing the harm to user data (50 percent). Nearly 65 percent of organizations did not offer credit monitoring services to their customers affected by the breach, and 73 percent don't offer credit monitoring or other identity theft tools as part of their business.

Sixty percent of the organizations had not encrypted their customer data that was breached. Nearly 35 percent of the breaches were caused by insider mistakes; 19 percent, via a third-party outsourcer; and 16 percent, via a malicious insider.

Among the stolen data were email (70 percent); credit card and payment data (45 percent); and Social Security numbers (33 percent).

"IT professionals in this study are correct when they say that following the loss or theft of consumer data it is critical for companies to take steps to understand the root cause in order to prevent another breach and protect consumers from future harm," said Larry Ponemon, chairman and founder of Ponemon Institute.

The good news: Following the data breach, 61 percent said their organizations increased their security budgets, and nearly 30 percent expanded their IT staff.

A full copy of the report is available here for download.

Have a comment on this story? Please click "Add Your Comment" below. If you'd like to contact Dark Reading's editors directly, send us a message.



Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dark Reading encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dark Reading moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. Dark Reading further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS



Insider Threat Reports

report How to Prevent an Illicit Data Dump
There are no silver bullets when it comes to protecting company and customer data from loss or theft, but there are technological and procedural systems that will go a long way toward preventing a WikiLeaks-like data dump. Here are some tips and tricks to help protect your organization's most sensitive information.

report Email and Data Loss
Email encryption, rights management, email gateways, and full-on data loss prevention systems can keep corporate data secure. Here's a look at the pros and cons of each, to help you determine what?s best for your business.

report An Insider Threat Reality check
Heightened concern that users could inadvertently expose or leak -- or purposely steal -- an organization's sensitive data has spurred debate over the proper technology and training to protect the crown jewels. In this special retrospective of recent news coverage, Dark Reading takes a look at how organizations are handling the threat -- and what users are really up to.

Other reports from the Insider Threat Tech Center: