Negligence causes most corporation data breaches
Negligence is the biggest cause of data breaches at corporations, but criminal attacks are growing fastest, a study recently released concludes.
The average cost of a data breach for a victimised organisation increased to $7.2 million, and the average cost per record came to $214, up $10 from the previous year, according to the 2010 Annual Study: U.S. Cost of a Data Breach, which was conducted by the Ponemon Institute and based on data supplied by 51 U.S. companies across 15 different industry sectors.
The costs associated with a breach involve detecting the incident, investigation, forensics, customer notification, paying for identity-protection services for victims, business disruption, and productivity losses, said Larry Ponemon, chairman and founder of the Ponemon Institute. A record can contain only one piece of information on an individual or multiple pieces of data, including social security number, contact information, driver's license number, purchasing habits, and account number, he said.
Malicious or criminal attacks are the most expensive and make up the fastest-growing category, with 31 percent of all breaches involving malice or crime. Negligence was the most common threat, with 41 percent of all breaches, according to the study, which was sponsored by Symantec.
The most expensive breach reported in the study was $35.3 million, and the least expensive was $780,000.
The companies have devised an online Data Breach Calculator for helping estimate how likely a breach is and how much a breach would cost based on an organisation's size, industry, location, and security practices.
Have your say...
The approval of your comment is at the discretion of this article's publisher. Write your comment with the following in mind to ensure the highest likelihood of it being approved:
- No promotional undertones
- No use of profanity
- Good spelling, grammar and layout
- Check punctuation, language and missing words
- No use of aggression
- No unsubstantiated claims
We reserve the right to remove comments at our discretion.
Your name is used alongside Comments.