Cost of data breaches rises 28 per cent
By Miya Knights,
Two years on from the first Ponemon Institute study that said the average cost of a data breach was £47 per record, the latest research has found it has now risen to £60.
The 28 per cent increase on 2007’s figures were all the more stark when compared to the fact that, for the second year running, lost business due to reduced consumer trust was the main contributor to overall data breach costs.
The total cost of a data breach ranged from £160,000 to £4.8 million in the survey. The average total cost had also risen to £1.7 million in 2008, up from last year’s figure of £1.4 million.
And the research, sponsored by PGP Corporation, showed that data breaches involving outsourced data to third parties were the most costly, at £67 per victim, as opposed to just £56 per victim when third parties were not involved.
"In just the second year of this UK study, research proves UK businesses continue to pay dearly for having a data breach,” said Dr Larry Ponemon, chairman and founder of the Ponemon Institute.
The magnitude of breach events included in the survey ranged from 4,100 to more than 92,000 records compromised, from 30 UK businesses spanning ten different industry sectors.
The majority (70 per cent) of all cases involved insider negligence, with only 30 per cent of incidents involving malicious acts. And 33 per cent of data breach cases in 2008’s study resulted from third-party errors. And over half (53 per cent) of reported costs were due to lost business.
One bright point that emerged was that costs associated with detection and escalation response, and communication with the customer after a breach decreased slightly in 2008, suggesting that businesses are improving their processes to uncover, manage and communicate data breaches
Respondents also identified encryption and identity and access management as the top two technology solutions used in response to a data breach. Control practices and training and awareness programmes were cited as the top two manual processes.
You may also like...
advertisement
Latest Security Features
Q&A: The ID card commissioner talks cards and controversy
We spoke to ID card commissioner Sir John Pilling about his thoughts on the identity scheme and why we might all think he's a bit of prat down the line.
- So you've been hacked, now what?
- The problems facing Internet Explorer
- Year in Review: 2009 in your words
- Top 10 security predictions for 2010
- Year in Review: Top tech stories of 2009
- The worst IT disasters of 2009
- Five free security software suites
- How to stay safe shopping online
- Is it time to switch to IPv6?
Latest Security Reviews
Symantec Backup Exec 2010 review
Rating: ![]()
advertisement
Most popular
- Google updates Chrome, awards security bonus
- Why is Microsoft accelerating Service Pack 1?
- Report: Macs cost less to run than Windows PCs
- Your Views: Google Street View across the UK
- Q&A: Conrad Wolfram on communicating with apps in Web 3.0
- O2 condemns 'bullying' law firms for threatening file-sharers
- Windows Phone 7 review ? hands on
- Dell Vostro V13 review
- Digital Economy Bill to cost ISPs up to £500 million
- Reviews round-up: Windows Phone 7 and Firefox Mobile
Latest News Videos in Security
Video: Why security is everybody's responsibility
Rik Ferguson, senior security advisor at Trend Micro says it's up to all of us to make security work.
Whitepapers
Want more background on today's hottest IT trends?
Visit IT PRO's whitepaper library for more on virtualisation, encryption and other topics.
Register for IT PRO
You'll get exclusive member benefits including free whitepapers, downloads, Webinars and weekly newsletters full of the latest IT PRO news, reviews, insight and expertise.





Cybercrime and Outsourcing are also top security concerns
Another survey conducted by The Ponemon Institute and Lumension identified cybercrime and outsourcing were the top security concerns. The survey found that 50% of IT operations professionals viewed outsourcing as an imminent and near-time critical risk, while more than 75% of IT security professionals noted cybercrime a major issue - despite concerted efforts to thwart hackers in recent years. In tandem, survey results highlighted an increase in shared thinking between traditionally disparate IT functions within the organisation - IT operations and IT security. With the emergence of consumer technology in the workplace, coupled with social networking and Web 2.0 technologies and the increased sophistication of cyber criminals, truly securing an organisation's IT environment is an uphill battle In the next year or two, these challenges will increase in both the breadth and depth of threats - the companies surveyed made this very clear. The key for both IT operations and IT security is to find the common ground necessary to better-wage this security battle together. Given the breadth and depth of security breaches spanning the globe this year - all of which have had a long-lasting negative impact on organisations and consumers alike - IT security and IT operations professionals have an increasingly critical task at hand, to protect sensitive data wherever it lives in an organisation. Based on interviews with IT experts in operations and information security, the following eight mega trends rose to the top: cloud computing; virtualization; mobility and mobile devices; cybercrime; outsourcing to third parties; data breaches and the risk of identity theft; peer-to-peer (P2P) file sharing and Web 2.0. Key Findings from the 2008 Security Mega Trends Survey include: * Outsourced IT is a Major Concern: As companies look to reduce costs based on economic factors in 2009, outsourcing will continue to be an attractive option for efficiency gains. The security risks associated with outsourcing are tremendous according to survey data. The top risks posed by outsourcing according to IT security (50%) and IT operations (59%) respondents is the exposure of sensitive information to third parties and the threat that that data will be improperly protected in transit. * Data Breaches and Cybercrime are on the Rise: Survey results indicated that the biggest concern relative to data loss is the threat of data making it into the hands of cyber thieves (46% for IT security and 24% for IT operations), thus wreaking continued havoc not just on the customers whose data was stolen but also on the organisations responsible for that lost data. IT survey participants reported that 92% of the organisations have experienced a cyber attack. The injury to corporate brands as a result of a major data loss incident is critical, especially in an economic downturn * Workforce Mobility Contributes to Data Loss: IT security and IT operations' respondents (96% and 91% respectively) agree that employee mobility introduces a significant threat to securing corporate data as it diminishes IT's ability to properly identify and authenticate remote users on the network. * Emerging technologies - Web 2.0, P2P, virtualization and cloud computing - are growing in prevalence with Cloud computing causing the most concern: The influx of new technologies - both business and consumer technologies - has opened additional avenues for cyber thieves to steal trade secrets and confidential business information. Cloud computing came out on top with 61% of respondents ranking it as a major security concern among the emerging technology trends. Virtualization was perceived as the least concerning at this time, though survey respondents cited all of these types of technologies as key concerns in the next year, where the increased risk to expose sensitive data ranked highest among both respondent groups.
By Ip_andrewclarkef on Wednesday Feb 4