Modern organizations grapple with the complex task of securing sensitive data in sprawling hybrid and multi-cloud environments. Due to insufficient visibility and governance, data is often misplaced, duplicated, or left exposed. This fragmented environment makes it difficult for teams to accurately assess data exposure risks, comply with stringent privacy regulations, and continuously track sensitive data across locations, owners, and usage.
Without a consistent, holistic view of where sensitive data resides and how it is managed, organizations face significant security, compliance, and operational risks.
Read more…
Source: Rapid7
Related:
- Health insurer Bupa fined £175k after staffer tried to sell customer data on dark web souk
September 28, 2018
International health insurance business Bupa has been fined £175,000 after a staffer tried to sell more than half a million customers’ personal information on the dark web. The miscreant was able to access Bupa’s CRM system SWAN, which holds records on 1.5 million people, generate and send bulk data reports on 547,000 Bupa Global customers to ...
- Facebook security breach: Up to 50m accounts attacked
September 28, 2018
Facebook has said “almost 50 million” of its users were left exposed by a security flaw. The company said attackers were able to exploit a vulnerability in a feature known as “View As” to gain control of people’s accounts. The breach was discovered on Tuesday, Facebook said, and it has informed police. Users that had potentially been affected ...
- EU lawmakers push for cybersecurity, data audit of Facebook
September 27, 2018
European Union lawmakers appear set this month to demand audits of Facebook by Europe’s cybersecurity agency and data protection authority in the wake of the Cambridge Analytica scandal. A draft resolution submitted Thursday to the EU Parliament’s civil liberties and justice committee urged Facebook to accept “a full and independent audit of its platform investigating data ...
- Tesco Bank facing £30m fine from FCA over 2016 cyber attack
September 24, 2018
Tesco Bank could be fined as much as £30 million over its 2016 cyber attack that compromised the accounts of at least 40,000 of its seven million customers. The attack in November 2016 is one of the most serious ever on a UK retail bank, with money stolen from 20,000 accounts over one weekend – some customers seeing ...
- Equifax fined £500,000 for failing to protect customer details in cyber attack
September 20, 2018
A credit reference agency that failed to protect the details of 15 million people in the UK during a cyber attack has been fined £500,000. The personal information lost or compromised during the incident between 13 May and 30 July 2017 ranged from names and dates of birth to addresses, passwords, driving licence and financial details. The Information Commissioner’s ...
- Data management firm Veeam mismanages own data, leaks 445m records
September 12, 2018
A company which has built its reputation on global data management services appears to have left a treasure trove of data open to the prying eyes of the public. Baar, Switzerland-based Veeam calls itself the “global leader in intelligent data management” and offers “Hyper-Available” data management solutions able to merge traditional data backup and recovery tools with modern ...