Feeds

Lost records down even though breach incidents soared

Conflicting findings from Verizon report puzzle security watchers

Internet Security Threat Report 2014

The number of records lost to security breaches last year decreased dramatically, even though incidents of breaches actually increased.

The latest Global Data Breach Investigations Report from Verizon Business found the number of breached records fell from 144 million in 2009 to only four million last year. Yet the much reduced figure covers 760 data breaches, the largest caseload to date, and far higher than the 141 breaches analysed in 2009.

The conflicting figures have left security watchers scratching their heads. One possible explanation is that earlier editions of the report took in the effects of the infamous TJX Maxx and Heartland security breaches, which effectively skewed the figures upwards.

Verizon reckons the focus is moving away from large scale breaches to smaller, opportunistic attacks. Physical attacks - including manipulating common credit-card devices such as ATMs, petrol pumps and point of sale terminals - are all on the rise, playing a role in 29 per cent of the cases investigated.

Hacking (50 per cent) and malware (49 per cent) were the most prominent types of attack, with external criminal hackers (rather than corrupt insiders) blamed for 92 per cent of scams.

The US Secret Service collaborated with Verizon in preparing the report, which this year also involved input from the National High Tech Crime Unit of the Netherlands Policy Agency (KLPD). Verizon's annual study is considered among the best of its type in the industry. ®

Remote control for virtualized desktops

More from The Register

next story
UK smart meters arrive in 2020. Hackers have ALREADY found a flaw
Energy summit bods warned of free energy bonanza
DRUPAL-OPCALYPSE! Devs say best assume your CMS is owned
SQLi hole was hit hard, fast, and before most admins knew it needed patching
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Mozilla releases geolocating WiFi sniffer for Android
As if the civilians who never change access point passwords will ever opt out of this one
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Protecting against web application threats using SSL
SSL encryption can protect server‐to‐server communications, client devices, cloud resources, and other endpoints in order to help prevent the risk of data loss and losing customer trust.