Connect with us

E-Business

Social Media Becomes Biggest Data Breach Threat – Report

Published

on

Kindly share this post

Social media incidents accounted for over 56% of the 4.5 billion data records compromised worldwide in the first half of 2018.

This is according to Gemalto’s latest Breach Level Index, a global database of public data breaches.

Gemalto says over the first six months of this year, there were 945 data breaches. Just six social media breaches accounted for over half of all records compromised. This included the Cambridge Analytica-Facebook incident, where the personal information of up to 87 million users may have been improperly shared with the political consultancy.

In April, Facebook revealed that almost 60 000 South African Facebook users could have been impacted by the social network’s data leak. Last month, Facebook announced another breach affecting 50 million of its global users.

“Obviously, this year social media has been the top industry and threat vector for the compromise of personal data, a trend we can expect to continue, with more and more sectors leveraging these platforms to reach key audiences, especially political teams gearing up for major elections,” says Jason Hart, VP and CTO for data protection at Gemalto.

Just this week, Google announced it was shutting down the consumer version of its social network Google+ and revealed that data from up to 500 000 users may have been exposed to external developers by a bug that was present for more than two years in its systems.

Closer to home, South African data centre operator Hetzner yesterday disclosed a “security incident” involving account information; this after it previously revealed it had been hacked almost a year ago.

Rising risk

Compared to the same period in 2017, Gemalto found the number of lost, stolen or compromised records increased by 133%, though the total number of breaches slightly decreased over the same period, signalling an increase in the severity of each incident.

According to the Breach Level Index, almost 15 billion data records have been exposed since 2013, when the index began benchmarking publicly disclosed data breaches.

“During the first six months of 2018, more than 25 million records were compromised or exposed every day, or 291 records every second, including medical, credit card and/or financial data or personally identifiable information,” the report reads.

“This is particularly concerning, since only 1% of the stolen, lost or compromised data records were protected by encryption to render the information useless, a percent-and-a-half drop compared to the first six months of 2017.”

Breach sources

Gemalto says malicious outsiders caused the largest percentage of data breaches (56%), a decrease of almost 7% over the second half of 2017, and accounted for over 80% of all stolen, compromised or lost records. Accidental loss accounted for over 879 million (9%) of the records lost this half, the second most popular cause of data breaches, representing over one-third of incidents.

Identity theft continues to be the leading type of data breach, as it has been since Gemalto first started tracking in 2013. While the number of identity theft breaches increased by 13% over the second half of 2017 to just over 64%, the number of records stolen through these incidents increased by 539%, representing over 87% of all records stolen.

“Financial access incidents show a disturbing trend in the escalation of severity,” Gemalto says.

Although it found that overall incident numbers are on the decline, 171 in the first half of 2017 compared to 123 in the same period in 2018, the number of records breached in the six-month period increased from 2.7 million in 2017 to 359 million this year.

Most sectors saw an increase in the number of incidents compared to the previous half. The exceptions were government, professional services, retail and technology, though both government and retail saw an increase in the number of records breached through fewer events.

Healthcare continues to lead in number of incidents (27%), with the largest such incident, 211 LA County, exposing 3.5 million records through accidental loss.

Social media ranks top for number of records breached due to the high-profile customer data compromises at Facebook and Twitter, although the number of incidents is the lowest, making up less than 1% of the total.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

CrediCorp Partners FintechNGR to Drive Consumer Credit Initiative

Published

on

Kindly share this post

Nigerian Consumer Credit Corporation (CrediCorp), has partnered Fintech Association of Nigeria (FinTechNGR) to drive consumer credit scheme initiative through a robust payment platform that would be provided by members of FinTechNGR.

Speaking at a Social Meet in Lagos, organised by FinTechNGR, with the theme: “Augmenting the Future, AI, Credit and Transformation of Nigerian Finance,” the Chairman, CrediCorp Board of Directors, Aderemi Abdul-Bojela, said members of FinTechNGR would have specific roles to play in the partnership, in the areas of providing robust platform for money transfer, technology evaluation, among others.

“Today, CrediCorp is engaging with members of FinTechNGR in a social interactive gathering to discuss collaboration and support for the growth of Consumer Credit Corporation in Nigeria. We want to interact to understand how technology will drive the crediCorp initiative in Nigeria and also to understand the role that members of FinTechNGR will play in all of these initiatives around CrediCorp,” Abdul-Bojela said.

Describing the partnership as a welcome development that will enhance savings culture among Nigerians, the Chief Operating Officer (COO) of FinTechNGR, Dr. Babatunde Obrimah, said: “FinTechNGR is an enabler of technology advancement in Nigeria. We bring the players together to drive technology innovation.

“Our role in the FinTechNGR-CrediCorp partnership is to ensure that our members support the growth of consumer credit in Nigeria, by providing the relevant payment platforms for all financial transactions among the banks who are the lenders, the customers who are the burrowers and the CrediCorp who is the guarantor.”

Speaking about the benefits for Nigerians, Obrimah said the Consumer Credit Corporation in Nigeria would enhance the country’s credit culture and enable Nigerians to save and plan well with their savings. “The initiative will address inflation, help in liquidity flow, build trust in customers’ borrowing, boost credit culture and enhance the culture of savings among Nigerians,” Obrimah said.

Addressing the issue of risk and consumer trust, Abdul-Bojela said the CrediCorp has put measures in place to ensure that the banks that would be involved in lending, would be protected and guaranteed of the repayment of the loans within the CrediCorp ecosystem.

He said there would be an independent management that would ensure that the right technology is put in place to recover all monies.


Kindly share this post
Continue Reading

E-Business

NITDA to Integrate of Digital Literacy into School Curriculum

Published

on

Kindly share this post

Kashifu Abdullahi, director general of the National Information Technology Development Agency (NITDA), announced plans to integrate digital literacy into Nigeria’s education system, to achieve a 70% literacy rate by 2027 and 95% by 2030.

NITDA to Integrate of Digital Literacy into School Curriculum

Kashifu Abdullah, DG, NITDA

The NITDA’s DG made the announcement on Wednesday in Abuja during a media parley.

He stated that in order to include digital literacy in the curriculum at all educational levels, from kindergarten to university, the Agency was collaborating with the Federal Ministry of Education.

Abdullahi, said that this program would equip Nigerians with the digital know-how and abilities they need to succeed in the digital economy.

He emphasized that NITDA would also launch the “Digital Literacy for All Initiative” to educate Nigerians outside the formal education system and provide access to quality digital content.

Nigeria would train over two million young people in in-demand IT skills in order to become significant global outsourcing hub

NITDA is also collaborating with the Defence Headquarters and security agencies to develop digital solutions to address security concerns, including the use of drones, artificial intelligence, and other digital resources to combat banditry, abduction, and terrorism, he said.

 

According to him, the agency’s draft SRAP 2.0 plan aims to establish Nigeria as a digitally empowered nation, with a focus on innovation, national prosperity, and inclusivity.

The director general of NITDA added that, if successfully implemented, this strategy could propel Nigeria into a new phase of digital empowerment and leadership in the global digital economy.


Kindly share this post
Continue Reading

E-Business

Experts Highlight Trusted Relationships as Key Vector

Published

on

Kindly share this post

In 2023, more than 1/5 of cyberattacks persisted for over a month, the annual Kaspersky Incident Response 2023 report has revealed, with trusted relationships emerging as one of the main attack vectors in these prolonged cases.

The report draws on the results of Kaspersky’s cyberattack investigations throughout the year, gathered when supporting organisations sought incident response assistance or when hosting expert events for their internal incident response teams.

Primary reasons of organisations approaching Kaspersky Incident Response team with service requests were encrypted files (32.8% of requests), suspicious activities (31%), data leakage (20%), and also included non-authorised accesses (3%), service unavailability (3%) and money theft (1.6%).

Among initial attack vectors of the investigated incidents were exploiting public facing application (42.4%), compromised accounts and BruteForce attacks (28.8% in total), trusted relationships (6.78%), phishing (5%), insider’s activity (3.4%).

Kaspersky Incident Response 2023 report indicates that long-lasting cyberattacks that persist for more than a month constituted 21.85% of the total, increasing from 2022 by 5.55%.

One notable trend observed in these attacks was the exploitation of trusted relationships as a primary vector. Compromises leveraging trusted relationships have occurred previously, but in 2023 their frequency increased.

As this method of attack enables threat actors to infiltrate multiple victims through a single compromised organisation, investigative teams face several additional challenges. Firstly, initially targeted organisations don’t always recognise the importance of thorough investigations and may be reluctant to cooperate.

Secondly, attacks initiated through trusted relationships often require more time to progress from the initial intrusion to the final incursion phase. Therefore 50% of these attacks lasted more than a month. A similar proportion of attacks exceeding one month were exclusively registered within the insider and phishing vectors.

“Our latest findings underscore the critical role of trust in cyberattacks. In 2023 and for the first time in recent years, attacks through trusted relationships were among the three most used vectors. Half of these incidents were discovered only after a data leak had been found.

“By exploiting trusted relationships, threat actors can prolong attacks and infiltrate networks for extended periods, posing significant risks to organisations. It’s imperative for businesses to remain vigilant and prioritise security measures to safeguard against such sophisticated tactics,” comments Konstantin Sapronov, Head of Global Emergency Response Team at Kaspersky.

 


Kindly share this post
Continue Reading

Trending