sb-au logo
Story image

As NDB takes hold, expect to see more breach reports come to light

14 Jun 2018

In light of Australia’s Notifiable Data Breaches legislation that rolled out in February, one Australian technology integrator says we can expect to see many reports surfacing over the coming years.

RBC Group says that ‘dozens’ of corporate data security breaches have been reported as part of the new legislation. Businesses with an annual turnover of more than $3 million must now notify the Australian Information Commissioner and customers in the event of a data breach.

The Notifiable Data Breaches Quarterly Statistics Report (January-March 2018) report detailed 63 breach notifications, of which the largest proportion came from the healthcare industry.

RBC Group notes that the legal accounting and management services sector who reported 10 breaches – equating to 16% of notices.

Further statistics from the report show that in 78% of cases, private contact information was exposed or accessed and in 30% of cases, financial details of businesses and customers were breached. Health information and identity information was also exposed 33% and 24% respectively.

RBC Group believes that there are increasing fears about the safety of classified corporate information, particularly with growing numbers of employees that work remotely.

“With more and more employees taking devices home or using them in public away from a corporate office, it’s no wonder we’re seeing such high numbers of corporate data breaches,” comments RBC Group managing director David Wheeler.

“I would expect these figures will continue to rise each quarter, so businesses need to start taking more responsibility in educating their workforce. This is particularly in regards to maintaining data security and ensuring that they audit the security of their entire network regularly.”

RBC Group cites further statistics from the report that reveal in 28 cases, the breach was the result of malicious or criminal attacks on the data. Malicious or criminal attacks usually involve the theft of personal information, or cyber security incidents resulting from unauthorised access to an entity’s systems.

“73% of data breaches involved the personal information of under 100 individuals, however in 3 cases, between 10,000 and 99,999 people were affected and in a further 3 cases more than 1000 people were affected,” the company states.

“Data breaches weren’t all the result of malicious or criminal attacks, however, with 32 cases a result of human error, with information inadvertently disclosed by sending a document to the wrong person.”

RBC Group is one of Australia’s largest independent and privately owned technology integrators. It was formed in 1975.

Story image
Bitdefender reveals new botnet which 'puts others to shame'
The botnet, which Bitdefender has dubbed ‘dark_nexus’ based on a string it puts in its banner, boasts new features and capabilities that ‘put to shame’ most other IoT botnets and malware that the cybersecurity has seen.More
Story image
Glenn Maiden to lead FortiGuard Labs A/NZ as director of threat intelligence
Maiden will focus specifically on threat intelligence sharing for organisations across A/NZ, so that those organisations may protect their businesses from existing and emerging cyber threats.More
Story image
UTS & Institute of Data announce scholarship program
But those who are finding themselves on reduced hours or out of work completely may be able to use that time to upskill.More
Story image
Guardicore Labs exposes brute force MS-SQL attack campaign
The cyber attack campaign uses password brute force to breach victim machines, deploys multiple backdoors and executes numerous malicious modules, such as multifunctional remote access tools (RATs) and cryptominers. More
Link image
Why secure remote access tools are more important and valuable than ever
Cyber attacks are ramping up as more people work from home and render themselves vulnerable. Here's why an effective remote access tool is absolutely essential to keep systems and users secure.More
Link image
Why employees have never been more vulnerable to cyber attack
COVID-19 is presenting the perfect opportunity to cyber attackers to mount potentially devastating spear-phishing campaigns against organisations via their remote workers. Learn how to fight back.More