(Bloomberg) – U.S. companies and government agencies suffered a record 1,093 data breaches last year, a 40 percent increase from 2015, according to the Identity Theft Resource Center.
Headline-grabbing hacks, with victims ranging from Wendy's Co. to the Democratic National Committee, are increasing despite regulatory scrutiny and more aggressive cyber-security spending. Worldwide spending on security-related hardware, software and services rose to $73.7 billion in 2016 from $68.2 billion a year earlier, according to researcher IDC. And that number is expected to approach $90 billion in 2018.
|Undiscovered and under-reported
"We are extremely confident that breaches are undiscovered and under-reported, and we don't know the full scope," Eva Casey Velasquez, chief executive officer of the Identity Theft Resource Center, said in an interview. "This isn't the worst-case scenario we are looking at; this is the best-case scenario."
Related: 8 ways to improve cyber insurance
Data breaches in 2016 exposed everything from social security numbers to user account log-in names and passwords. Attacks known as phishing, in which an employee is tricked into clicking an emailed link to give hackers access to a corporate network, accounted for about 56 percent of all breaches last year, according to the center. That's up from 38 percent in 2015. In many cases, employees received an email purporting to be from their company's chief executive officer or other high-level managers.
"When we look at these massive numbers of records and percentages, it's very easy to forget that each of these data points is a person, and there's someone behind this who is being very adversely affected," Velasquez said.
Criminals can use stolen information such as social security numbers, addresses and names to file false tax returns, order credit cards and to siphon money out of consumers' bank accounts.
|Training employees is essential
Adam Levin, chairman of the security company CyberScout LLC, which sponsored the report, said training employees about data privacy and security is essential. "A lot of companies don't do it," he said.
The Identity Theft Resource Center, which has been tracking breaches since 2005, compiles its reports using data listed on state regulators' web sites, as well as by filing Freedom of Information Act requests with various government agencies. Many data breaches still aren't included in these numbers.
Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader
Your access to unlimited PropertyCasualty360 content isn’t changing.
Once you are an ALM digital member, you’ll receive:
- Breaking insurance news and analysis, on-site and via our newsletters and custom alerts
- Weekly Insurance Speak podcast featuring exclusive interviews with industry leaders
- Educational webcasts, white papers, and ebooks from industry thought leaders
- Critical converage of the employee benefits and financial advisory markets on our other ALM sites, BenefitsPRO and ThinkAdvisor
Already have an account? Sign In Now
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
