312-253-4321    Get SUPPORT

Alchetec Blog

Looking Back at This Year’s Cybersecurity Issues

Looking Back at This Year’s Cybersecurity Issues

Every business in operation today needs to have some kind of comprehensive network security. Simply put, there are too many threats that can come in through an Internet connection for them to continue doing otherwise. The past year provides plenty of anecdotal proof of this fact, as a quick glance back can show.

In order to demonstrate how crucial, it is to prepare your company’s security against cyberattack, we’ll begin with a few statistics:

  • In 2017 over 130 large-scale breaches were reported, a 27 percent increase over 2016.
  • Nearly 1-in-3 organization have experienced some sort of cyberattack in the past.
  • Cryptojacking (stealing cryptocurrency) increased 8,500 percent in 2017.
  • 100,000 organizations were infected with the WannaCry ransomware (400,000 machines).
  • 5.4 billion WannaCry attacks were blocked in 2017.
  • The average monetary cost of a malware attack is $2.4 million.
  • The average time cost of a malware is 50 days.
  • Ransomware cost organization’s over $5 billion in 2017.
  • 20 percent of cyberattacks come from China, 11 percent from the United States, and six percent from the Russian Federation.
  • Phone numbers are the most leaked information.
  • 21 percent of files are completely unprotected.
  • 41 percent of companies have over 1,000 sensitive files left unprotected.
  • Ransomware is growing at 350 percent annually.
  • IoT-based attacks are growing at about 500 percent per year.
  • Ransomware attacks are expected to quadruple by 2020.
  • 7.7 percent of web requests lead to malware.
  • There were 54 percent more types of malware in 2017 than there were in 2016.
  • The cybersecurity market will be worth over $1 trillion by 2025.

Just in case you still aren’t convinced, we’ve also taken the liberty of selecting a small portion of 2018’s cyberattacks, cutting them off at July. For simplicity’s sake, we’ve divided them based on the intended targets: public (including individuals and governing bodies) and private (covering the businesses).

Public
January

  • The Department of Homeland Security was affected by a data breach that exposed information about 247,167 current and former employees.

March

  • Atlanta, Georgia was targeted by a ransomware attack called SamSam. This resulted in a massive problem for their municipal infrastructure. The ransom price given was $51,000, but Atlanta’s leadership refused to meet these demands. Overall, the numbers show that Atlanta has spent more than 10 times that number in the fallout of the attack. Some estimates place the actual cost of this event at nearly $20 million.
  • India’s national ID database, Aadhaar, leaked data of over a billion people. This is one of the largest data breaches in history. A user could pay 500 rupees, equal to about $7, to get the login credentials that allowed anyone to enter a person’s 12-digit code for their personal information. For 300 rupees, or about $4.20, users could also access software that could print an ID card for anyone associated with the database.
  • Cambridge Analytica, a data analytics company that U.S. President Donald Trump used to help his campaign, harvested personal information from over 50 million Facebook users without asking for their permission. Facebook hasn’t called this a data breach, but Cambridge Analytica has since been banned from using the service thanks to this event.

June

  • A hack of a U.S. Government-funded active shooter training center exposed the personal data of thousands of U.S. law enforcement officials. This also exposed which police departments aren’t able to respond to an active shooter situation.

Private
January

  • 280,000 Medicaid records were exposed when a hacker attacked the Oklahoma State University Center for Health Sciences. Among the information exposed were patient names, provider names, and full names for affected individuals.

February

  • An unsecured server owned by Bongo International, a company acquired by FedEx, leaked over a hundred-thousand files of FedEx customers. Some of the information leaked included names, drivers’ licenses, national ID cards, voting cards, and utility bills.

March

  • Orbitz, a travel booking site, fell victim to a security vulnerability that exposed 880,000 customers’ payment card information. There was also about two whole years of customer data stolen from their server.
  • French news site L’Express left a database that wasn’t password-protected up for weeks, despite being warned about the security issues regarding this.
  • 134,512 records regarding patients and financial records at the St. Peter’s Surgery and Endoscopy Center in Albany, NY were accessed by hackers.
  • MyFitnessPal, an application used by Under Armor, exposed about 150 million people’s personal information to threats.
  • The WannaCry ransomware claimed another victim in Boeing, which stated that “a few machines” were protected by Microsoft’s 2017 patch.

May

  • Thanks to Twitter storing user passwords in a plaintext file that may have been exposed by internal company staff, the social media titan had to force hundreds of millions of users to change their password.
  • An unauthenticated API found on T-Mobile’s website exposed the personal information of all their customers simply through the use of their cell phone number. The following information was made available: full name, address, account numbers, and tax IDs.
  • A bug found in Atlassian development software titles Jira and Confluence paved the way for hackers to sneak into IT infrastructure of several companies and one U.S. government agency.
  • Rail Europe, a popular server used by American travelers to acquire rail tickets, experienced a three-month data breach that exposed credit card information to hackers.

June

  • A marketing company named Exactis had 340 million records stolen from it, but what’s most shocking about this is that they had accumulated information about nearly every American out there. In response to the breach, there was a class action lawsuit made against the company.
  • Adidas’s website was hacked, resulting in a loss of a few million users’ personal and credit card information.
  • A hacker collective called Magecart initiated a campaign to skim at least 800 e-commerce sites, including Ticketmaster, for sensitive information.

As these lists too clearly demonstrate, network security needs to be a priority for companies of every size and industry. If you’d like help with your security solutions, turn to the professionals at Alchetec. We have the experience and skill necessary to configure the protections that you and your business need. To get started, contact us at 312-253-4321.

Improving Your Collaboration Can Improve Performan...
Tip of the Week: 4 Ways Technology Can Benefit Bus...
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Sunday, June 16 2019

Captcha Image

Subscribe to Our Blog!

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Security Tip of the Week Technology Best Practices Business Computing Cloud Productivity Network Security IT Services Malware Email Hackers Privacy Hosted Solutions Data Data Backup Outsourced IT Software Internet Business Managed IT Services Productivity Innovation Data Recovery Microsoft Tech Term IT Support Ransomware Hardware Computer Cloud Computing Mobile Devices Small Business Business Continuity User Tips IT Support Backup Efficiency Google Business Management Collaboration Communication Managed IT Services Android Paperless Office Windows 10 VoIP Remote Monitoring Upgrade Internet of Things Data Management Workplace Tips Smartphones Managed Service Provider Smartphone Phishing Disaster Recovery Server Encryption Cybersecurity Passwords Mobile Device Managed IT Browser Office 365 Social Media Windows 10 BYOD Holiday Artificial Intelligence Save Money Communications Saving Money Quick Tips Managed Service Document Management Applications Business Technology Wi-Fi Facebook Employer-Employee Relationship Compliance Risk Management Government Chrome Blockchain Windows Information Infrastructure SaaS Tip of the week Telephone Systems Bandwidth Unified Threat Management File Sharing Automation Password BDR Healthcare Virtualization Antivirus Recovery Network Microsoft Office Help Desk Vendor Management Vulnerability IT Management Scam Analytics Project Management Virtual Reality IT Service Wireless Work/Life Balance Bring Your Own Device Mobile Device Management Office Data Security Hosted Solution Robot Firewall Training Two-factor Authentication Data loss Storage Tablet Gmail App Apps Files Going Green Money Router Customer Relationship Management Maintenance Data Storage Word Regulations Website Politics VPN Networking Social Internet Exlporer Machine Learning Remote Computing IoT Printing Access Control Virtual Private Network Downtime Electronic Medical Records Cooperation Digital Payment Mobile Security Outlook Identity Theft Computers Upgrades Licensing Company Culture Software as a Service Computing Assessment Alert How To Patch Management Mobility How To Monitors Proactive Consultation Samsung The Internet of Things Unified Communications Uninterrupted Power Supply Employees Redundancy Gadgets Smart Technology Network Management Management Remote Monitoring and Management RMM Big Data Net Neutrality Chromebook Twitter Server Management Users HIPAA Settings Miscellaneous Remote Workers Health Customer Service Flexibility IT Budget End of Support WPA3 Operating System Hard Drive Solid State Drive Cortana Transportation Trending Legislation Digital Education Backup and Disaster Recovery G Suite Cabling E-Commerce Virtual Assistant Websites Telephony IT Technicians Geography Hard Disk Drives Specifications Automobile Proactive Maintenance Managed IT Service Cookies Remote Worker Data Breach Spam Mobile Computer Care WannaCry Office Tips Finance Social Networking Fleet Tracking Tech Terms Google Drive Cache Taxes Hard Disk Drive Bookmarks Emoji Spyware Human Error Firefox IT Solutions Processors Permissions Star Wars Features Wasting Time Statistics SharePoint Mirgation High-Speed Internet Authentication Mail Merge USB Break Fix Nanotechnology Monitoring ROI Technology Laws Legal Law Enforcement Staff Private Cloud Solid State Drives Black Friday Motherboard Asset Tracking Theft Avoiding Downtime Techology Personal Information Hotspot Recycling Unsupported Software Favorites Teamwork Shortcut Development Display MSP Permission Lenovo Augmented Reality Fraud Utility Computing Disaster 3D Printing Electronic Health Records Database Bluetooth Downloads Update Migration Authorization Address Wireless Technology 5G Dark Web Screen Reader Software Tips Consulting Notes Heating/Cooling Unified Threat Management Gadget Tech Support Operations Managing Stress WiFi VoIP Dark Data Options Safety Cyber Monday Mobile Computing Apple Social Engineering OneNote Financial Time Management Disaster Resistance Virus IBM Language eWaste Mobile Data Conferencing Shared resources Technology Tips Chatbots Cables Test Superfish Cybercrime Cyberattacks Voice over Internet Protocol Multi-Factor Security Hacker Black Market Data Warehousing Smart Tech Managed Services Provider PowerPoint Servers User Error Wearable Technology Enterprise Content Management GPS YouTube Mouse Wireless Internet Google Maps Search Employee-Employer Relationship Procurement Proactive IT Computer Repair Crowdsourcing Computing Infrastructure Meetings OneDrive Identity Supercomputer Notifications Cost Management Travel Read Only Windows 7 Hacking Google Calendar Botnet Network Congestion Wires Zero-Day Threat Physical Security Microsoft Excel Connectivity Content Filtering History Point of Sale Professional Services Printer Sports Vulnerabilities Tracking Comparison Business Growth Employer/Employee Relationships Distributed Denial of Service Modem Security Cameras Touchscreen IT Consulting Alerts Enterprise Resource Planning Corporate Profile Humor Instant Messaging Manufacturing Mobile Office Hacks Motion Sickness Printers Emergency Domains Students Relocation Regulation Public Speaking Hiring/Firing Database Management Presentation Sync Staffing Lithium-ion battery Fun IT Consultant CrashOverride GDPR Mobile Device Managment Error Administrator Marketing Hard Drives Budget Public Cloud Competition Information Technology IP Address Cleaning