Monday, December 15, 2014

It’s Still a Big Risk, Even Though Sometimes You Can’t See It


You’ve been reading about it, hearing about it and have potentially been affected by it.  Yet, most people have yet to protect themselves from the potential of a loss due to a cyber-attack or a data breach.  It’s becoming more and more apparent that the new order of terrorism lies in creating havoc within the databases of companies of all sizes.  Sometimes, the act of invasion is merely to disrupt and to make a statement, while most of the time, the invasion is seeking records that can provide saleable information to the wider criminal marketplace.    And, as society around the globe becomes more desperate, the risk grows.  Following is a summary of some of the largest breaches of 2014.  There were thousands of others that you won’t read about, unless you’re the victim, of course.
January, 2014.  Michaels had over 3 million customer’s information compromised.  During the same month, Target followed up with an episode that exposed over 70 million customer names, addresses, phone numbers and email addresses.  Fortunately, there was some coverage for Target.  In a quarterly report to shareholders, Target reported that they have currently accounted for about $200 million in expenses relating to the breach, of which $90 million was collected as an insured loss.
August, 2014.  Community Health Systems, which operates 206 hospitals across 28 states, had hackers from China uncover information pertaining to 4.5 million patients.  Although personal health information was not compromised, social security numbers and other personal information were captured, exposing the system to potential for litigation.
September, 2014.  Home Depot discovered that approximately 56 million shopper’s credit card information and about 53 million email addresses were gathered as a result of malware installed for the self-checkout operation between April and September.  There are currently about 44 lawsuits resulting from the cyber-attack.
October, 2014. JP Morgan experienced the effects of Russian hackers affecting 76 million households and information including names, addresses, phone numbers and email addresses.  Fortunately, account numbers were not compromised.  Although no unusual fraud activity was observed as a result of the breach, it does portray the risk is real.  Additionally, nine other financial institutions were hacked by the same group of Russian instigators.
November, 2014.  The US postal service had over 800,000 employee’s personal information compromised.
Although those were situations that received attention from the press, there are daily occurrences to small businesses and individuals that you won’t read or hear about, unless it happens to you. 
Cyber liability and data breach is becoming a common area of risk to insure against.  Make sure that you review your coverage and include protection for cyber liability and data breach occurrences. Sometimes what you can’t see can hurt you.