Report: Data breaches on the rise, Australian businesses ill-prepared

​Data loss and the theft ​of confidential information incidents rose by 78.68 per cent in 2018

Data loss and theft continues to rise, yet two-thirds of organisations in Australia do not have a team or capability to respond to cyber security incidents.

According to the 2018/2019 BDO and AusCERT Cyber Security Survey, data loss and the theft of confidential information incidents rose by 78.68 per cent in 2018 compared to 2017, and data breaches experienced through third-party providers and suppliers also rose by 74.3 per cent.

Between 2017 and 2018 alone, professional and technical service organisations have seen a 300 per cent increase in data breaches via third-party providers and suppliers, and a 670 per cent increase in data loss and theft of confidential information. However, no professional and technical services respondents to the survey perceived an incident caused by a third party as a threat, indicating incidents were likely to have occurred, but were not detected.

Although cyber criminals are the most common sources of cyber attacks, respondents also reported a significant increase in suspected attacks from foreign governments and nation states, with 64 per cent of data breaches caused by malicious or criminal attacks, while 33 per cent could be attributed to human error.

While most organisations were confident in meeting compliance regulations as outlined by recently introduced cyber security and data privacy legislation, 66 per cent of businesses surveyed have no predefined plan or capability to contain, eradicate and recover from cyber security incidents.

On average, the cost to an Australian organisation for a data breach is almost $US2 million. The potential for huge financial implications is one reason 86.4 per cent of survey respondents indicated they expected to have a cyber security awareness plan in place within the next 12 months. By 2020, 84.8 per cent of respondents plan to implement regular cyber security risk assessments.

Respondents are anticipating data loss and theft of confidential information to be the most prevalent threat in 2019 and beyond, with respondents expecting attacks coming from activists (80%), insiders (68%), or foreign nationals (10%).

Recent high-profile cyber breaches at Dell, HealthEngine and PageUp have exposed Australia’s vulnerability to data-related breaches and prompted calls for greater investment in cyber security awareness and incident management in the professional services domain.

A recent Customer Loyalty 2018 Report by Gemalto also found Australian consumers are more likely than their global counterparts to walk away from a company (retail, financial or healthcare) that experiences a breach, with over two-thirds (70 per cent) admitting they would look elsewhere if financial and sensitive information such as card details and bank accounts were stolen. Over half (55 per cent) admitted they would also walk if passwords alone were stolen.

The report found retailers (62 per cent), social media sites (57 per cent) and banks (53 per cent) are most at risk of suffering the consequences of a breach, with Australian consumers prepared to avoid their business in future. Two-thirds of Australian consumers are worried that at some point their online personal information will be stolen.

BDO’s national cyber security leader, Leon Fouche, said all industries needed to ramp up their focus on employee education and training to empower their people to take action.

“While recent compliance regulations have boosted data breach notification numbers and industry leaders have endorsed the implementation of more comprehensive resilience measures, many Australian organisations do not have the capability to detect a breach or respond to it in a manner that contains cost and reputational damage,” Fouche said.

“Sophisticated cyber attacks and data breaches sit alongside weapons of mass destruction and natural disasters in terms of their ability to disrupt and damage; however, in many business cases, the focus on preventative measures has far outweighed response or incident management.

“Every organisation should have a pre-defined plan, which is regularly tested, to ensure that everyone in the organisation knows what to do and how to respond to cyber security incidents.”

The most common vehicle for cyber attack remained phishing, which accounted for 20.19 per cent of all cyber security incidents experienced in 2018 and has been trending upwards since the inaugural BDO and AusCERT Cyber Security Survey in 2016. Phishing was followed by malware (14.08%) and ransomware attacks (9.39%).

“That’s why education and training are so important. Employees need to be given the knowledge to detect a potential cyber attack and the tools to respond if they suspect there has been a breach or they have inadvertently disclosed sensitive information,” Fouche said.

The survey examined the cyber security risks and realities experienced by more than 500 board, business and IT executives across Australia and New Zealand.

Follow CMO on Twitter: @CMOAustralia, take part in the CMO conversation on LinkedIn: CMO ANZ, join us on Facebook: https://www.facebook.com/CMOAustralia, or check us out on Google+:google.com/+CmoAu  

 

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Show Comments

Latest Videos

Launch marketing council Episode 5: Retailer and supplier

In our fifth and final episode, we delve into the relationship between retailer and supplier and how it drives and influences launch marketing strategies and success. To do that, we’re joined by Campbell Davies, group general manager of Associated Retailers Limited, and Kristin Viccars, marketing director A/NZ, Apex Tool Group. Also featured are Five by Five Global managing director, Matt Lawton, and CMO’s Nadia Cameron.

More Videos

Nowadays, when everything is being done online, it is good to know that someone is trying to make an improvement. As a company, you are o...

Marcus

10 lessons Telstra has learnt through its T22 transformation

Read more

Check out tiny twig for comfy and soft organic baby clothes.

Morgan mendoza

Binge and The Iconic launch Inactivewear clothing line

Read more

NetSuite started out as a cloud-based provider of Enterprise Resource Planning software or as NetSuite solution provider, which companies...

talalyousaf

NetSuite to acquire Bronto's digital marketing platform for US$200m

Read more

Thanks for sharing this post, its really good information I get through this blog.CDPO Online Exam Training

Infosectrain01

3 ways Booking.com is improving its B2B marketing game

Read more

Time is of the essence, especially for customer service teams. With chatbots, you can interact and assist customers at a larger scale, al...

Jai

Triple-digit customer database growth, personalised engagement become reality for Stone & Wood

Read more

Blog Posts

Getting privacy right in a first-party data world

With continued advances in marketing technology, data privacy continues to play catchup in terms of regulation, safety and use. The laws that do exist are open to interpretation and potential misuse and that has led to consumer mistrust and increasing calls for a stronger regulatory framework to protect personal information.

Furqan Wasif

Head of biddable media, Tug

​Beyond greenwashing: Why brands need to get their house in order first

Environmental, Social and (Corporate) Governance is a hot topic for brands right now. But before you start thinking about doing good, Craig Flanders says you best sort out the basics.

Craig Flanders

CEO, Spinach

​The value of collaboration: how to keep it together

Through the ages, from the fields to the factories to the office towers and now to our kitchen tables, collaboration has played a pivotal role in how we live and work. Together. We find partners, live as families, socialise in groups and work as teams. Ultimately, we rely on these collaborative structures to survive and thrive.

Rich Curtis

CEO, FutureBrand A/NZ

Sign in