Bangalore: When a data breach strikes, the damage can reach further than a business’s finances, reputation, and customer privacy. A breach can also severely impact the careers of individuals at the company involved. According to a new report from Kaspersky Lab and B2B International, almost one-in-three (31%) data breaches in the past year have led to people losing their jobs. And, among these, at 29% of SMBs and 27% of enterprises, it was senior non-IT employees that were laid off.
Breaking careers with data breaches
A data breach in a company can be a life-changing experience for both its customers and employees, according to the recent report from B2B International and Kaspersky Lab ‘From data boom to data doom: the risks and rewards of protecting personal data’. The study shows that 43% of businesses worldwide had at least one data breach in the last year, of which in two-fifths of cases, customer PII was affected (41% for SMBs and 40% for enterprises). As for the staff involved, they don’t always — not even C-level — get to keep their jobs afterwards.
The range of employees laid off after a data breach demonstrates that the incident can affect anyone, and 2017 alone saw a wide variety of people fired as a result of data breaches: from CEOs to a regular employees exposing the company customer data.
Of course, for businesses this means more than just lost ‘talent’: 45% of SMBs and 47% of enterprises have had to pay compensation to the customers affected, over a third – 35% and 38% respectively – have reported problems attracting new customers, and over a quarter of SMBs (27%) and of enterprises (31%) have had to pay penalties and fines.
Data beyond control adds to the risk
In modern business, storing sensitive personal data is practically unavoidable: 88% of businesses collect and store their customers’ PII, and 86% collect and store employee PII, according to the report. Moreover, in today’s increasingly complex environment, new regulations like GDPR mean that storing personal information comes with compliance risks too.
What makes these risks even more tangible is the actual reality of how businesses store data: approximately 20% of sensitive customer and corporate data resides outside the corporate perimeter: in public cloud, BYOD devices and in SaaS applications, which makes controlling the data flow and keeping it safe a challenge for businesses.
Data protection measures beyond policies
There’s a need for security solutions that can protect data across the whole infrastructure –including cloud, devices, applications and more. Cybersecurity awareness among IT staff and beyond also needs to be improved, as more and more business units are now working with data, and thus need to understand how to keep it safe.
“While a data breach is devastating to a business as a whole, it can also have a very personal impact on people’s lives — whether they are customers or failed employees – so this is a reminder that cybersecurity has real-life implications and is in fact everyone’s concern. With data now traveling on devices and via the cloud, and with regulations like GDPR becoming enforceable, it’s vital that businesses pay even closer attention to their data protection strategies,” said Dmitry Aleshin, VP – Product Marketing, Kaspersky Lab.