Feeds

Lost records down even though breach incidents soared

Conflicting findings from Verizon report puzzle security watchers

Beginner's guide to SSL certificates

The number of records lost to security breaches last year decreased dramatically, even though incidents of breaches actually increased.

The latest Global Data Breach Investigations Report from Verizon Business found the number of breached records fell from 144 million in 2009 to only four million last year. Yet the much reduced figure covers 760 data breaches, the largest caseload to date, and far higher than the 141 breaches analysed in 2009.

The conflicting figures have left security watchers scratching their heads. One possible explanation is that earlier editions of the report took in the effects of the infamous TJX Maxx and Heartland security breaches, which effectively skewed the figures upwards.

Verizon reckons the focus is moving away from large scale breaches to smaller, opportunistic attacks. Physical attacks - including manipulating common credit-card devices such as ATMs, petrol pumps and point of sale terminals - are all on the rise, playing a role in 29 per cent of the cases investigated.

Hacking (50 per cent) and malware (49 per cent) were the most prominent types of attack, with external criminal hackers (rather than corrupt insiders) blamed for 92 per cent of scams.

The US Secret Service collaborated with Verizon in preparing the report, which this year also involved input from the National High Tech Crime Unit of the Netherlands Policy Agency (KLPD). Verizon's annual study is considered among the best of its type in the industry. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Hackers thrash Bash Shellshock bug: World races to cover hole
Update your gear now to avoid early attacks hitting the web
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
Ello? ello? ello?: Facebook challenger in DDoS KNOCKOUT
Gets back up again after half an hour though
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.