The InformationWeek -- Blogs

Security

Topics:   Security

  • Email this page E-mail this page
  • Print this page Print this page
  • Bookmark and Share
  • icon

Cost Of Data Breaches Keeps Going Up


Posted by George Hulme, Feb 2, 2009 08:43 PM

The costs associated with a data breach involving consumer records have been steadily rising, according to the Ponemon Institute's fourth annual study, Cost Of A Data Breach. The survey took a close look at 43 organizations that reported a breach in 2008 -- ranging from the loss of 4,200 records to more than 113,000.


The average total cost per incident reached $6.65 million last year, up from $6.3 million in 2007.

The costs include everything from the detection of the breach to consumer notification and response, as well as legal and administrative expenses, lost customers, lost sales, reputation management, and everything associated with providing help to the affected consumers through hot lines and credit-monitoring tools.

Here are some other findings from the release, available here.


  • Health care and financial services companies experienced the highest churn rate -- 6.5 percent and 5.5 percent respectively, on a total average of 3.6 percent, which reflect the sensitivity of the data collected and the customer expectation that information will be protected.
  • Third-party organizations accounted for more than 44 percent of all cases in the 2008 study and are also the most costly form of data breaches due to additional investigation and consulting fees.
  • More than 84 percent of 2008 cases involved organizations that had had more than one data breach in 2008 -- meaning that companies are becoming more experienced in managing breaches over time.
  • More than 88% of all cases in this year’s study involved insider negligence.
  • More than half of respondents believe that training and awareness programs assist in preventing future breaches and 44 percent have expanded their use of encryption.
  • It's interesting to note that third parties accounted for 44% of all cases this year. Watch your outsourcers.

    « Google Execs Face Jail Time In Italy | Main | How Simple Is Too Simple? »



    Sign Up Now
    For InformationWeek News Alerts




    This is a public forum. United Business Media and its affiliates are not responsible for and do not control what is posted herein. United Business Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.

    Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of United Business Media LLC and may be edited and republished in print or electronic format as outlined in United Business Media's Terms of Service.

    Important Note: This comment area is NOT intended for commercial messages or solicitations of business.




     
     

    1. HPC Joins the Dummy Revolution?
    2. Detecting Scalability Problems With Intel Parallel Universe Portal
    3. Just Say No To SFAQL Parallelism


    Join The InformationWeek Group On LinkedIn


                               


    1. Top Resources To Save Big On Cyber Monday
    2. AT&T, T-Mobile, Verizon All Offering Black Friday Sales
    3. Verizon Snags Samsung's Omnia II With WinMo 6.5
    4. Murdoch And Microsoft Redefine Search
    5. Thoughts On The Motorola Droid


    1. Microsoft, Google Face Off On Healthcare
    2. Global CIO: Fear Of Facebook For The Enterprise
    3. Sun Upgrades VirtualBox Virtualization Software
    4. Barnes & Noble Struggles To Fill Nook Demand
    5. IBM Buys Database Security Company
    6. Online Shopping Gains Following Black Friday

     

      Ars Technica
    Boing Boing
    Channel 9 Forums
    CRN Blogs
    Dr.Dobb's Portal: Blogs
    Engadget
    Gizmodo
    GrokLaw
      Lifehacker
    Schneier on Security
    Slashdot
    TechCrunch
    Techdirt
    Techmeme
    Valleywag

      DECEMBER 2008
    NOVEMBER 2008
    OCTOBER 2008
    SEPTEMBER 2008
    AUGUST 2008
    JULY 2008
    JUNE 2008
    MAY 2008
      APRIL 2008
    MARCH 2008
    FEBRUARY 2008
    JANUARY 2008
    DECEMBER 2007
    NOVEMBER 2007
    OCTOBER 2007
    SEPTEMBER 2007