The Conversation

  • Written by Nicholas Patterson, Lecturer, Deakin University
Hackers cause most data breaches, but accidents by normal people aren't far behind

Have you ever had your personal information leaked on the internet? Maybe it was something you purchased online from a website, only to find out that the company was hacked months later? If the answer is “yes”, you probably want to know whether the breach was reported and dealt with.

Australian organisations reported 242 data breaches between April 1 and June 30, 2018. There was a dramatic increase in notifications from February 2018, when eight notifications were made, to June 2018, when 90 notifications were made.

There are obvious reasons for this increase. Since the government’s Notifiable Data Breaches (NDB) scheme was introduced on February 22, organisations are becoming more aware of cyber security, and the rules and regulations around handling data.

Read more: New law will force some (but not all) organisations to reveal data breaches

What does a data breach look like?

To give you an example of a data breach, we can look back to 2017, when almost 50,000 Australians had their sensitive information leaked online.

In this case, a private contractor incorrectly configured an Amazon cloud storage service, inadvertently causing the data to become publicly accessible. A Polish security researcher discovered the data, which included names, passwords, identification details, phone numbers, and credit card numbers.

The NDB scheme aims to prevent breaches like this from being kept under wraps, and to allow all affected parties to learn the extent of the damage.

How many people were affected?

The recent quarterly NDB report suggests that most data breach notifications are coming from small or medium-sized organisations, with relatively few customers affected. There were 55 notifications (23%) of breaches in which 11 to 100 people were affected. In 52 instances (21%), 101-1,000 people were affected. And there was just one notification that affected more than a million people.

This suggests that larger organisations are generally more adept at preventing data breaches.

What kind of data was breached?

The types of information being leaked is broken down into Tax File Number, health information, identity information, financial details, and contact information.

Results show that contact information was the most common type of data leaked, with 216 notifications reported (89%). This was followed by financial information, with 102 notifications (42%); identity information (94 notifications, 39%); and Tax File Numbers (47 notifications, 19%).

It is worrying that financial information was leaked in 42% of cases. Any data breach is problematic, but the leak of financial data can have a dramatic impact on a victim’s life if it results in fraudulent purchases.

What is causing these data breaches?

Three main reasons were cited for data breaches in the last quarter: malicious or criminal attacks (59%), human error (36%), and system fault (5%).

Most notifications were the direct result of cyber incidents, including phishing, malware, ransomware, brute-force attacks, compromised or stolen credentials, and hacking. This was followed by theft of paperwork or data storage devices, and breaches caused by rogue employees and insider threats.

Read more: What could a My Health Record data breach look like?

Human error is often regarded as the main cause of cyber security incidents. But it was only the second most common cause of data breaches during the last quarter.

In 22 cases, data was sent to the wrong recipient. When organisations unintentionally released or published information this accounted for 12 notifications. The report includes clicking on a phishing email as human error, although this action should really be categorised as the result of a malicious attack.

Which industries were most affected?

The report lists five industry sectors: health service providers; finance and legal services; accounting and management services; education and business services; and professional services.

The health care industry was most affected, with 49 notifications (20%), followed closely by the finance sector with 36 notifications (15%).

Why these sectors? Financial information, such as credit cards or bank details, is a key target for hackers because it can translate into real money quickly.

Read more: What should Australian companies be doing right now to protect our privacy

The health services industry is also a lucrative target for hackers who have in the past put confidential patient data up for ransom. For example, in 2016 the Hollywood Presbyterian Medical Center paid a US$17,000 ransom in bitcoin to hackers who had taken control of its computer system.

The education sector reported 19 notifications (8%). This number is likely to grow as hackers become aware of the value of unpublished research and intellectual property.

A recent example of this was the hacking attempts of Australian National University, where it was reported that ANU spent many months fending off attacks on its systems that were traced back to China.

Combating data breaches

The NDB scheme and reporting is an important way to shed light on the cyber security issues facing Australia, now and in the future. Knowing how breaches are occurring, how often and to which sectors will allow cyber security professionals and researchers to tackle these issues head on.

Some breaches can be defended using technology, such as ransomware prevention tools. But breaches that result from human error are more difficult. Education and training for employees can assist them in preventing simple mishaps from occurring.

Bringing these numbers down will require a mix of technological solutions and education. Until we get this right, we’re likely to see more breaches in the near future, rather than less.

Authors: Nicholas Patterson, Lecturer, Deakin University

Read more http://theconversation.com/hackers-cause-most-data-breaches-but-accidents-by-normal-people-arent-far-behind-99684


Independent Candidate for the Seat of Gippsland East, Matt Stephenson

MATT STEPHENSON TO GO INTO THE RING WITH BULL A sixth generation East Gippslander is “throwing his hat in the ring” to challenge Tim Bull at the forthcoming state elections. As an aspiring Independen...

Malcolm Turnbull press conference with the Minister for the Environment and Energy

Well the Party Room today has today overwhelmingly supported the National Energy Guarantee, and as a consequence, we are one step closer to cheaper and more reliable energy. This policy is part of ...

Independent Parliamentary Budget Office exposes Shorten's lies

Bill Shorten's false claims about so-called insecure work lie in tatters today, following an analysis published by the independent Parliamentary Budget Office (PBO).  The PBO’s independent analysis...

Business News

3 Tips for Better Management

Running your own team, whether it’s the whole business or simply one department, means making sure that you are a good manager. Being a manager is a lot harder than many people assume, and often mea...

Research reveals the avoidable task 92% of people and businesses are wasting time on

New research commissioned by Zoom2u, an innovative platform that provides radically fast and reliable deliveries, reveals that despite massive tech advancements in the delivery space, 92% of Austral...

JB Hi-Fi battles on despite Amazon

Expected to be one of the most vulnerable companies amid Amazon Australia’s arrival, an emboldened JB Hi-Fi has posted an increase in revenue of 21.8% over 2017-18, to total $6,854.3 million. The gr...


Discovering South Australia

Hey there! Have you ever thought about visiting Australia? Just imagine road tripping in a Winnebago with your family in tow and enjoying the beauty of the Down Under. If you have never enjoyed visi...

Lake Macquarie for an adventure to match every budget

Explore the environs of Australia’s largest saltwater lake on a shoestring and still have a blast If your tastes for travel out weight your wallet, and low cost or no cost activities are what you ...

Fun and exciting things to do in Sydney

Sydney is a beautiful city in Australia, famous for many of its landmarks, such as the harbour, many beautiful beaches and the Opera House. It is obviously a top spot for tourists and a must see locat...

You might also like