Cost of data breaches increasing

A new security flaw makes some browsers vulnerable to cybercrime. (Duncan Alfreds, Fin24)
A new security flaw makes some browsers vulnerable to cybercrime. (Duncan Alfreds, Fin24)

Washington - The cost of data breaches is rising for companies around the world as sophisticated thieves target valuable financial and medical records, according to a study released on Wednesday.

The total average cost of a data breach is now $3.8m, up from $3.5m a year ago, according to a study by data security research organisation Ponemon Institute, paid for by International Business Machines.

The direct costs include hiring experts to fix the breach, investigating the cause, setting up hotlines for customers and offering credit monitoring for victims. Business lost because customers are wary after a breach can be even greater, the study said.

Data breaches are becoming more common and significant, with high-profile attacks on Sony, JPMorgan Chase and retailers Target and Home Depot in the past year and a half.

"Most of what's occurring is through organised crime," said Caleb Barlow, vice president of IBM Security. "These are well-funded groups. They work Monday to Friday. They are probably better funded and better staffed than a lot people who are trying to defend against them."

Healthcare risk

IBM, which sells cyber security services to companies, has a vested interest in highlighting the costs of data breaches.

The cost of a data breach is now $154 per record lost or stolen, up from $145 in 2014, according to the study, based on interviews with 350 companies from 11 major countries that had suffered a data breach.

The study's authors said average costs did not apply to mega-breaches affecting millions of customers, such as those suffered by JPMorgan Chase, Target and Home Depot, which cost the companies far greater sums. Target alone said last year its breach cost $148m.

The study found that the healthcare was most at risk for costly breaches, with an average cost per record lost or stolen as high as $363, more than twice the average for all sectors of $154.

That reflects the relatively high value of a person's medical records on the underground market, said IBM, as Social Security information is much more useful for identity theft than simple names, addresses or credit card numbers.

We live in a world where facts and fiction get blurred
In times of uncertainty you need journalism you can trust. For only R75 per month, you have access to a world of in-depth analyses, investigative journalism, top opinions and a range of features. Journalism strengthens democracy. Invest in the future today.
Subscribe to News24
ZAR/USD
16.18
(-0.09)
ZAR/GBP
21.21
(-0.07)
ZAR/EUR
19.19
(-0.20)
ZAR/AUD
11.58
(-0.28)
ZAR/JPY
0.15
(-0.23)
Gold
1910.57
(+0.31)
Silver
24.76
(+0.32)
Platinum
887.50
(+0.99)
Brent Crude
42.50
(+1.69)
Palladium
2368.00
(+0.57)
All Share
55355.29
(+1.02)
Top 40
50789.71
(+1.02)
Financial 15
10526.44
(+1.45)
Industrial 25
74773.69
(+0.87)
Resource 10
53359.59
(+1.02)
All JSE data delayed by at least 15 minutes morningstar logo
Company Snapshot
Voting Booth
Please select an option Oops! Something went wrong, please try again later.
Results
Yes, and I've gotten it.
24% - 55 votes
No, I did not.
49% - 112 votes
My landlord refused
27% - 61 votes
Vote