Data Protection Commission Report 2020 Archives - L2 Cyber Security Solutions Ltd.

#WeekendWisdom 068 A Data Breach of Bank Details

Liam — Fri, 05 Mar 2021 02:00:57 +0000

Welcome to #WeekendWisdom number 68. This week we’re going to talk about a data breach of bank details.

https://www.l2cybersecurity.com/wp-content/uploads/2021/03/WeekendWisdom-068-lo.mp4

Where is this coming from?

As I said last week, the Data Protection Commission had issued a report for 2020. I’ve had a chance to read through it now in a bit more detail. I really love looking at the case studies that they include there because these are real life events that have occurred.

One of them struck me as something that could occur anywhere.

What? A data breach of bank details??? That’s serious!

It was Case Study 15: Bank details sent by WhatsApp. What had occurred was that a customer of a financial institution had gotten in contact with them wanting to get a copy of their BIC and IBAN details. The member of staff that was dealing with the enquiry knew this person. So, because of that, they took a picture of the details on their personal phone and sent them by WhatsApp to the customer.

WhatsApp is encrypted, so it must be safe. Right?

But it turns out the details that they took the photo of were for somebody else. So, when the customer reported this incident to the bank, they realised this was a data breach. That customer had seen somebody else’s personal details.

How does a business prevent this type of issue?

This is simply a staff training issue. Staff need to be aware that they should always follow proper protocols when dealing with people’s personal details. To make sure that they provide the correct details to the correct person.

As I say it could happen to anybody. So use that example with your staff today.

So that’s it for this week. Lets be careful out there and we’ll talk to you again next week.

How can L2 Cyber Security help you?

We offer a full range of training programmes, which can be delivered online or in-person*.

L2 Cyber Security are also a partner of CyberRiskAware for online self-directed Cyber Security Awareness training and Phishing testing.

*With appropriate social distancing and other health and safety measures adhered to.

Follow us on Social media:

Liam is available on Twitter, LinkedIn and Instagram.

Follow L2 Cyber on Twitter, LinkedIn, Instagram and Facebook.

The post #WeekendWisdom 068 A Data Breach of Bank Details appeared first on L2 Cyber Security Solutions Ltd..

#WeekendWisdom 067 Data Protection Commission Report 2020

Liam — Fri, 26 Feb 2021 02:15:40 +0000

Welcome to #WeekendWisdom number 67. This week we’re going to talk about Data Protection Commission Report 2020.

https://www.l2cybersecurity.com/wp-content/uploads/2021/02/WeekendWisdom-067-lo.mp4

Yesterday the Data Protection Commission (DPC) in Ireland released their annual report for 2020 and I’ll just give a quick summary of its findings here.

What is the number 1 complaint that the DPC get?

The number one source of complaints for the third year in a row under the GDPR remains access requests. So, businesses out there are still having trouble giving people access to their data that they’re entitled to.

I always focus in the training to make sure that people get their access rights done properly. They have proper procedures in place to handle these requests from individuals.

Any figures for Data Breaches?

Over in regard to data breaches. The number of those reported to the Data Protection Commission has increased again by about 8% overall.

But the number one source of data breaches was unauthorised disclosures of personal data, which was up 12.5% over last year, to nearly 6,000 breaches, which is really, really significant.

Data Breaches caused by hacking were up about 40% and Ransomware incidents also doubled over last year. So, things are going the wrong way.

Is there any good news in the Data Protection Commission Report 2020?

Just to finish on a happy note. I was delighted to see that data breaches in regard to phishing have halved over last year. So that must mean people are getting really good training out there on how to spot dodgy emails.