UK Security Breach Investigations Report 2010 Published
Cambridge, UK (26th January, 2010) – An analysis of actual data compromise cases has been released by Computer Security and Forensics consulting firm 7Safe and the University of Bedfordshire. Anonymised data has been analysed from over 60 computer forensic investigations undertaken by 7Safe in what makes for fascinating reading.
Co-author and 7Safe CEO Alan Phillips said “Compared with many existing studies that are based purely on survey data, this report reveals what is really happening in the UK. The work carried out by 7Safe’s breach investigation team has been expertly analysed by Professor Carsten Maple of the University of Bedfordshire, and the results are intriguing.
Professor Maple commented, “To my knowledge this report is the first of its kind in the UK, and many businesses will find the results very interesting. It has been a pleasure working with 7Safe, who are renowned as publisher and co-author of the ACPO Good Practice Guide for Computer-Based Electronic Evidence, and with whom the university operates a joint Master of Science in Computer Security and Forensics."
Some of the headline statistics:
• 36% of cyber attacks on UK organisations originated from Vietnam, followed by the US (29%)
• 69% of data compromises occurred in the retail sector
• In 85% of cases, payment card information was stolen
• 80% of security breaches came from outside the organisation
• SQL injection was used in 60% of the cases
• The majority of attacks (73%) were relatively unsophisticated in complexity
• 86% of attacks were achieved through web applications
• Of the organisations that suffered payment card data breaches, none of them were compliant with the required security standard, PCI DSS
The UK Security Breach Investigations Report, supported by high profile organisations SOCA (Serious Organised Crime Agency) and the Metropolitan Police’s Police Central e-Crime Unit, is available in digital format free of charge from www.7Safe.com/breach_report
7Safe will be giving presentations on data from the UK Security Breach Investigations report on-stand (G42) of Infosecurity Europe 2010, the No. 1 industry event in Europe held on 27th – 29th April in its new venue Earl’s Court, London
7Safe is a leading Computer Security and Forensics consulting firm offering a diverse portfolio of services in the fields of computer forensics, penetration testing, PCI DSS compliance and audit, eDiscovery / eDisclosure, and IT security training & certification. To find out more, please visit www.7safe.com.
The University of Bedfordshire was established in August 2006, following the merger between the University of Luton and De Montfort University's Bedford Campus. The University has 1,000 staff along with 19,000 students from over 100 countries. To find out more, please visit www.beds.ac.uk.
