Sometimes a cyber incident is not a cyber attack and what you can do to stop it.
The loss of control of your information and it getting into the public domain is not always a cyber attack – many times it is simply a mistake by your team. It has happened to the Australian telecommunications company Telstra:
In this case the people working on a backend database made a mistake which exposed unlisted data on a public facing system. Australia has seen a number of high profile cyber attacks recently, with Medibank and Optus being hacked and the personal information of millions of customers being exposed or even posted on the Dark Web. However a simple mistake by a team member can be just a devastating for the customer whose information is exposed.
It happens to councils and police forces in the UK who accidentally release citizen’s personally identifiable information into the public domain.
领英推荐
Remember once the confidential information is on the internet, no matter how sincere your apology is, it is next to impossible to delete it. You may fix the original leak but you do not know who copied that data and what they plan to do with it?
What should you do?
Here are two quick things I always start with when working with clients:
Act now before you let slip sometime you need to keep secret.