Story image

As NDB takes hold, expect to see more breach reports come to light

14 Jun 18

In light of Australia’s Notifiable Data Breaches legislation that rolled out in February, one Australian technology integrator says we can expect to see many reports surfacing over the coming years.

RBC Group says that ‘dozens’ of corporate data security breaches have been reported as part of the new legislation. Businesses with an annual turnover of more than $3 million must now notify the Australian Information Commissioner and customers in the event of a data breach.

The Notifiable Data Breaches Quarterly Statistics Report (January-March 2018) report detailed 63 breach notifications, of which the largest proportion came from the healthcare industry.

RBC Group notes that the legal accounting and management services sector who reported 10 breaches – equating to 16% of notices.

Further statistics from the report show that in 78% of cases, private contact information was exposed or accessed and in 30% of cases, financial details of businesses and customers were breached. Health information and identity information was also exposed 33% and 24% respectively.

RBC Group believes that there are increasing fears about the safety of classified corporate information, particularly with growing numbers of employees that work remotely.

“With more and more employees taking devices home or using them in public away from a corporate office, it’s no wonder we’re seeing such high numbers of corporate data breaches,” comments RBC Group managing director David Wheeler.

“I would expect these figures will continue to rise each quarter, so businesses need to start taking more responsibility in educating their workforce. This is particularly in regards to maintaining data security and ensuring that they audit the security of their entire network regularly.”

RBC Group cites further statistics from the report that reveal in 28 cases, the breach was the result of malicious or criminal attacks on the data. Malicious or criminal attacks usually involve the theft of personal information, or cyber security incidents resulting from unauthorised access to an entity’s systems.

“73% of data breaches involved the personal information of under 100 individuals, however in 3 cases, between 10,000 and 99,999 people were affected and in a further 3 cases more than 1000 people were affected,” the company states.

“Data breaches weren’t all the result of malicious or criminal attacks, however, with 32 cases a result of human error, with information inadvertently disclosed by sending a document to the wrong person.”

RBC Group is one of Australia’s largest independent and privately owned technology integrators. It was formed in 1975.

Symantec releases neural network-integrated USB scanning station
Symantec Industrial Control System Protection Neural helps defend against USB-borne cyber attacks on operational technology.
Ramping up security with next-gen firewalls
The classic firewall lacked the ability to distinguish between different kinds of web traffic.
Gartner names LogRhythm leader in SIEM solutions
Security teams increasingly need end-to-end SIEM solutions with native options for host- and network-level monitoring.
Cylance makes APIs available in endpoint detection offering
Extensive APIs enable security teams to more efficiently view, enrich, and contextualise real-time intelligence collected at the endpoint to keep systems secure.
SolarWinds adds SDN monitoring support to network management portfolio
SolarWinds announced a broad refresh to its network management portfolio, as well as key enhancements to the Orion Platform. 
JASK prepares for global rollout of their AI-powered ASOC platform
The JASK ASOC platform automates alert investigations, supposedly freeing the SOC analyst to do what machines can’t. 
Pitfalls to avoid when configuring cloud firewalls
Flexibility and granularity of security controls is good but can still represent a risk for new cloud adopters that don’t recognise some of the configuration pitfalls.
Securing hotel technology to protect customer information
Network security risks increase exponentially as hotels look to incorporate newer technologies to support a range of IoT devices, including smart door locks.