Ransomware Attacks Solar in 2016, Projected to Double Again in 2017

Ransomware attacks handled by Beazley more than quadrupled in 2016, with nearley half of these attacks in the healthcare sector, and Beazley Projects these attacks will double again in 2017. Organizations appear to be particulary vulnerable to attacks during IT system freezes, at the end of financial quarters and during busy shopping periods. Evolving ransomware variants enable hackers to methodically investigate a company`s system, selectively lock the most critical files, and demanding higher ransoms to get the more valuable files unecrypted.

Source: WSJ - Beazley | Published on October 25, 2017

 

The rise of unintended disclosure as a breach cause indicates that formerly small mistakes now have the potential to quick lead to large data breaches. Employee education and training, up to date IT system protections and an incident response plan for when a breach occurs continue to be the best defenses against these attacks.

2016 data breach trends

Ransomware rising

Ransomware attacks were ofer four times more numerous in 2016 than in 2015. The ease and effectiveness of these attacks may find an even larger increase in 2017 with Beazley projecting these attacks to double again in the course of this year.

Sorry, i didn`t mean to

The proliferation of hackers has made formerly minor mistakes much more dangerous. Unintended disclosure, most often emails or faxes sent to the wrong recipient, represented 32% of breaches in 2016, up from 24% in 2015.

Breaking the bank

Hacks and malware accounted for 40% of financial institution data breaches in 2016, up from 27% in 2015. Unintended disclosure - mainly caused by misdirected emails - was also up, rising to 28% of breaches in 2016 from 24% in 2015.

Higher education hacking

Hacks and malware accounted for nearly half of higher education data breaches in 2016 (45%), up from 35% breaches in 2015. Unintended disclosures caused 28% of breaches in 2016, up from 22% in 2015.

The doctor will see who now?

Unintended disclosure - misdirected faxes and emails or the improper release of discharge papers - led to 40% of breaches in the healthcare industry in 2016, up from 30% in 2015. In a sign that the industry might be improving defenses, hacks and malware accounted for only 19% of breaches in 2016, down from 27% in 2015.

Four steps organizations can take to help protect their data

Perfect cyber security is impossible to attain, but there are steps organizations can take to protect their data. Here are four key steps organizations can take to minimize the risk:

  • Deploy prevention and detection tools;
  • Use threat intelligence services;
  • Train managers and employees on cyber security and threat awarness; and
  • Conduct risk assessments focused on identifying and protecting sensitive data.

About Beazley Breach Response (BBR)

Beazley has helped clients handle more than 5,000 data breaches since the launch of Beazley Breache Response in 2009 and is the only insurer with a dedicated in-house team focusing exclusively on helping clients handle data breaches. Beazley`s BBR Services team coordinates the expert foresic, legal, notification and credit monitoring services that clients need to satisfy all legal requirements and maintain customer confidence. In addition to coordinating data breach response, BBR Services maintains and develops Beazley`s suite of risk management services, designed to minimize the risk of a data breach occurring.