Financial Services Firms Stare into the Abyss as Data Breaches Rocket

Uploaded on 2015-06-23 in NEWS-Cybersecurity News, FREE TO VIEW, BUSINESS-Services-Financial

According to a Freedom of Information request by Egress Software Technologies, the UK Information Commissioner’s Office notched up 791 breaches in this sector between 2012 and 2014, including 585 in 2014 alone.

The company has clarified that not all of these were security-related - the figure for data security issues was 158. Institutions reporting breaches in these years included Barclays, HSBC, Lloyds Banking Group, NatWest, Nationwide and Santander.
Egress chief executive Tony Pepper said: “Today’s report casts some major concerns over the mistakes they’re making with the information entrusted to them, whether that be citizens’ personal details or highly confidential reports about the economic future of the country.
“It is staggering to see financial services firms reporting more than three times the number of incidents than the legal sector, which has recently come under fire from the ICO.
“It is interesting to note that the monetary penalties issued by the ICO to this sector have historically been so low.”

Pepper said the rise in breaches should be triggering alarm bells everywhere, as once the EU General Data Protection Regulation - still making its long, slow path through the Brussels machine - is passed, the sector could face meltdown.
Under the new laws, far more severe penalties could be levied against miscreants than are currently being dished out by the UK regulator.
DataIQ: http://bit.ly/1T0wbLb

« PwC says UK Security Breaches Often Not Reported

WhiteHat Security: Majority of Websites Are Vulnerable to Data Thieves »

CyberSecurity Jobsite

Perimeter 81

Real Attacks. Real Tools. Real Scenarios.
Schedule a demo

Training that transforms behaviours

Sign Up: Cyber Security Intelligence Newsletter

Directory of Suppliers

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security.

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

CertiKit

CertiKit produce toolkit products that accelerate the adoption of ISO/IEC standards, including ISO 27001, helping organizations all over the world to realize the benefits as soon as possible.

SafeBreach

SafeBreach's platform simulates hacker breach methods across the entire kill chain to identify breach scenarios in your environment before an attacker does.

StackRox

StackRox delivers a container-native security platform that adapts detection and response to new threats.

SteelCloud

SteelCloud has spent the last decade inventing technology to automate policy compliance, configuration control, and Cloud security.

Wipro

Wipro Limited is a leading global information technology, consulting and business process services company.

SBD Automotive

SBD Automotive are specialists in automotive technology providing independent research and consultancy to help create smarter, more secure, better connected, and increasingly autonomous cars.

BlackCloak

BlackCloak provides Concierge Cyber Security for high-net-worth individuals and corporate executives to protect them from cybercrime, reputational risks, hacking and identity theft.

CyberSafe

CyberSafe is a Portuguese company with a focus on cybersecurity solutions and services including network security, managed security, incident response and forensic analysis.

Enea

Enea is one of the world’s leading specialists in software for telecommunications and cybersecurity. Our products are used to enable services for mobile subscribers, enterprise customers and IoT.

Prima Cyber Solutions (PCS)

Prima Cyber Solutions is focused on protecting your business from the massive and devastating impacts that cyber-attacks may cause.

Amvia

Amvia is a fast-growing telecoms, Internet and Microsoft service provider. We supply voice, data and cyber security services to 100s of small and large companies.

Digital Intelligence

Digital Intelligence offer a full array of products, forensic and e-discovery consulting services and training.

Kusari

Securing your software supply chain starts with understanding. Kusari is on a mission to bring transparency to your software supply chain and power secure development.

Q-Bird

Q*Bird's mission is to provide equipment for the current, and future European quantum internet.

Seven AI

Seven AI develops cyber security software designed to identify online threats.

runZero

runZero delivers the most complete security visibility possible, providing you the ultimate foundation for successfully managing exposures and compliance.