2008: Sky is the Limit for US Data Breaches
The year is not even close to being over and the data breaches reported in the US have surpassed exceeded the number of such incidents reported for 2007, says San-Dieg based Identity Theft Resource Center. And while these numbers amaze and worry us, we should keep in mind the same ITRC admits the number might be higher as some breaches are never reported.
In the first 8 months of 2008, 449 US businesses and government agencies have reported either lost or stolen data. These breaches resulted in compromised data on over 22 million individuals. Wonder what the real numbers are, considering the unreported or half-disclosed breaches. ITRC estimates that about 40% of such cases are somehow beautified or kept quiet.
In a statement quoted by the Register, ITRC founder Linda Foley thinks the large numbers reported are also due to companies being more open about admitting data breaches rather than to an increase in data thefts and losses.
“If more states would publish breach notification lists, there would be more information to study and to help us understand this growing concern,” she said. “At this time, only three states publish such information. Additionally, more companies are starting to audit their security and network systems and use readily available security measures. This pro-active approach means that breaches are being identified that might otherwise have gone undetected.”
Be it openness or more frequent breaches, the real numbers are scary. I for one am really not looking forward for next year’s reports