Cost of data breaches rises 28 per cent
By Miya Knights,
Two years on from the first Ponemon Institute study that said the average cost of a data breach was £47 per record, the latest research has found it has now risen to £60.
The 28 per cent increase on 2007’s figures were all the more stark when compared to the fact that, for the second year running, lost business due to reduced consumer trust was the main contributor to overall data breach costs.
The total cost of a data breach ranged from £160,000 to £4.8 million in the survey. The average total cost had also risen to £1.7 million in 2008, up from last year’s figure of £1.4 million.
And the research, sponsored by PGP Corporation, showed that data breaches involving outsourced data to third parties were the most costly, at £67 per victim, as opposed to just £56 per victim when third parties were not involved.
"In just the second year of this UK study, research proves UK businesses continue to pay dearly for having a data breach,” said Dr Larry Ponemon, chairman and founder of the Ponemon Institute.
The magnitude of breach events included in the survey ranged from 4,100 to more than 92,000 records compromised, from 30 UK businesses spanning ten different industry sectors.
The majority (70 per cent) of all cases involved insider negligence, with only 30 per cent of incidents involving malicious acts. And 33 per cent of data breach cases in 2008’s study resulted from third-party errors. And over half (53 per cent) of reported costs were due to lost business.
One bright point that emerged was that costs associated with detection and escalation response, and communication with the customer after a breach decreased slightly in 2008, suggesting that businesses are improving their processes to uncover, manage and communicate data breaches
Respondents also identified encryption and identity and access management as the top two technology solutions used in response to a data breach. Control practices and training and awareness programmes were cited as the top two manual processes.
You may also like...
Sponsored Links
advertisement
You may also like...
Latest Security Analysis & Insight
Who to trust after the VeriSign hack?
Davey Winder questions what data was stolen from VeriSign and wonders why the company hasn't been more forthcoming.
- Striving to solve the security skills crisis
- Would you employ a hacker or malware writer?
- Q&A: Raj Samani, CTO McAfee
- Erase and rewind: the EU and privacy
- My email address is [CENSORED]
- Is there such a thing as a secure tablet?
- 2011: The year in news
- BYOD: Old or new, good or bad?
- Are the cookie laws crumbling already?
Latest Security Reviews
Check Point 2210 Appliance review
Rating: ![]()
advertisement
Most popular
- Google releases Chrome for Android beta
- Will someone rid me of these troublesome Macs?
- OneNote hits Google?s Android
- BlackBerry Bold 9790 review
- Google sends in Bouncer to sort out malicious apps
- Ubuntu vs. Windows 7 on the business desktop
- Who to trust after the VeriSign hack?
- Head to Head: Mac OS X 10.7 Lion vs Windows 7
- ACTA: the basics, the controversies, and the future
- BT considering Ofcom price cap appeal
Latest News Videos in Security
IT PRO Podcast: Are UK data protection laws flawed?
We bring in two experts to talk about the problems with UK data protection law and the way it is managed.
Register for IT PRO
You'll get exclusive member benefits including free whitepapers, downloads, Webinars and weekly newsletters full of the latest IT PRO news, reviews, insight and expertise.






Cybercrime and Outsourcing are also top security concerns
Another survey conducted by The Ponemon Institute and Lumension identified cybercrime and outsourcing were the top security concerns. The survey found that 50% of IT operations professionals viewed outsourcing as an imminent and near-time critical risk, while more than 75% of IT security professionals noted cybercrime a major issue - despite concerted efforts to thwart hackers in recent years. In tandem, survey results highlighted an increase in shared thinking between traditionally disparate IT functions within the organisation - IT operations and IT security. With the emergence of consumer technology in the workplace, coupled with social networking and Web 2.0 technologies and the increased sophistication of cyber criminals, truly securing an organisation's IT environment is an uphill battle In the next year or two, these challenges will increase in both the breadth and depth of threats - the companies surveyed made this very clear. The key for both IT operations and IT security is to find the common ground necessary to better-wage this security battle together. Given the breadth and depth of security breaches spanning the globe this year - all of which have had a long-lasting negative impact on organisations and consumers alike - IT security and IT operations professionals have an increasingly critical task at hand, to protect sensitive data wherever it lives in an organisation. Based on interviews with IT experts in operations and information security, the following eight mega trends rose to the top: cloud computing; virtualization; mobility and mobile devices; cybercrime; outsourcing to third parties; data breaches and the risk of identity theft; peer-to-peer (P2P) file sharing and Web 2.0. Key Findings from the 2008 Security Mega Trends Survey include: * Outsourced IT is a Major Concern: As companies look to reduce costs based on economic factors in 2009, outsourcing will continue to be an attractive option for efficiency gains. The security risks associated with outsourcing are tremendous according to survey data. The top risks posed by outsourcing according to IT security (50%) and IT operations (59%) respondents is the exposure of sensitive information to third parties and the threat that that data will be improperly protected in transit. * Data Breaches and Cybercrime are on the Rise: Survey results indicated that the biggest concern relative to data loss is the threat of data making it into the hands of cyber thieves (46% for IT security and 24% for IT operations), thus wreaking continued havoc not just on the customers whose data was stolen but also on the organisations responsible for that lost data. IT survey participants reported that 92% of the organisations have experienced a cyber attack. The injury to corporate brands as a result of a major data loss incident is critical, especially in an economic downturn * Workforce Mobility Contributes to Data Loss: IT security and IT operations' respondents (96% and 91% respectively) agree that employee mobility introduces a significant threat to securing corporate data as it diminishes IT's ability to properly identify and authenticate remote users on the network. * Emerging technologies - Web 2.0, P2P, virtualization and cloud computing - are growing in prevalence with Cloud computing causing the most concern: The influx of new technologies - both business and consumer technologies - has opened additional avenues for cyber thieves to steal trade secrets and confidential business information. Cloud computing came out on top with 61% of respondents ranking it as a major security concern among the emerging technology trends. Virtualization was perceived as the least concerning at this time, though survey respondents cited all of these types of technologies as key concerns in the next year, where the increased risk to expose sensitive data ranked highest among both respondent groups.
By Ip_andrewclarkef on Wednesday Feb 4