The federal government once again showed its relative inability to maintain strong data security practices when the information of 44,000 FDIC customers was breached by an employee leaving the agency. The apparent breach happened in February and was discussed in an internal memo shared throughout the agency on March 18th. It was declared that the data downloaded on a personal storage device was done so “inadvertently and without malicious intent.” The memo does not state explicitly which information had actually been compromised. The FDIC has classified this as a “major incident,” under the Federal Information Security Modernization Act of 2014.
Though it seems that this compromise of data was solely due to a lack of attention paid by the FDIC and its former employee, it reiterates the need for organizations to implement and practice data loss prevention controls. The likelihood of this happening at any organization which holds sensitive information is high. It is important for companies to learn from this and implement a strong security awareness program for their employees which covers all aspects of information security, include data loss prevention.
If you have any questions, please contact a GraVoc certified Information Security specialist below:
Related articles
Tackle the Cybersecurity Talent Shortage by Hiring a vCISO
In this blog post, we discuss how outsourcing cybersecurity operations to a vCISO can help businesses, including SMBs, tackle the cybersecurity talent shortage.
Need-to-Know Privilege Explained
In this blog post and video, we explore need-to-know privilege in cybersecurity and why it’s important for organizations to assign user permissions on a need-to-know basis.
Email Security: Solutions to Protect Your Inbox from Cybersecurity Threats
In this blog post, we discuss the importance of email security for businesses and explore the VIPRE and Sendmarc email protection technology solutions.
