Symantec's ISTR finds 62 percent increase in the number of data breaches from the previous year
MUMBAI, INDIA: Symantec Corp.'s Internet Security Threat Report (ISTR), Volume 19, shows;
• A significant shift in cybercriminal behavior, revealing the bad guys are plotting for months before pulling off huge heists - instead of executing quick hits with smaller rewards.
• Attackers are unrelenting in their focus on large enterprises with over 69 percent or more than 2/3rds of the targeted attacks in India carried out on them.
According to Tarun Kaura, Director, Technology Sales at Symantec India: "One mega breach can be worth 50 smaller attacks. While the level of sophistication continues to grow among attackers, what was surprising last year was their willingness to be a lot more patient - waiting to strike until the reward is bigger and better."
Globally, there was a 62 percent increase in the number of data breaches from the previous year, resulting in more than 552 million identities exposed - proving cybercrime remains a real and damaging threat to consumers and businesses alike. The size and scope of breaches is exploding, putting the trust and reputation of businesses at risk, and increasingly compromising consumers' personal information - from credit card numbers and medical records to passwords and bank account details. Each of the eight top data breaches in 2013 resulted in the loss of tens of millions of data records. By comparison, 2012 only had a single data breach reach that threshold.
"Nothing breeds success like success - especially if you're a cybercriminal," added Kaura. "The potential for huge paydays means large-scale attacks are here to stay. Companies of all sizes need to re-examine, re-think and possibly re-architect their security posture."
Defense is Harder than Offense
Globally targeted attacks were up 91 percent and lasted an average of three times longer compared to 2012. In India, cyber criminals are unrelenting in their focus on large enterprises with a staggering 69 percent targeted attacks carried out against them. Despite stepping up their information security measures, businesses in India continue to be an attractive target for cybercriminals.
Furthermore, within organizations, support functions with access to critical data emerged as the strongest target for attackers globally. Personal assistants and those working in public relations were the two most targeted professions - cybercriminals use them as a stepping stone toward higher-profile targets like celebrities or business executives.
Small and medium-sized businesses often have less adequate security practices and resources. Attackers are increasingly targeting smaller businesses that have a relationship with a larger company. Not surprisingly, in India, small businesses received the highest number of phishing and virus-bearing emails - almost three times as much as the larger targets.