2013 Threat Report: 8 Mega Data Breaches, 552 Million Identities Exposed

Symantec has published its Internet Security Threat Report (ISTR) for 2013. Volume 19 of the ISTR reveals that the number of mega data breaches has increased considerably compared to the previous year. The figures show that the number of data breaches suffered by organizations in 2013 increased by 62% compared to 2012. A total of 552 million identifies were exposed last year, compared to 93 million exposed in 2012.

As far as mega data breaches are concerned, a total of 8 were reported in 2013. That’s a lot if we consider that only one was reported in 2012. “One mega breach can be worth 50 smaller attacks. While the level of sophistication continues to grow among attackers, what was surprising last year was their willingness to be a lot more patient – waiting to strike until the reward is bigger and better,” said Kevin Haley, director of Symantec Security Response.

Over ten million data records were lost in each of the 2013 mega breaches, providing cybercriminals with payment card data, bank account details, passwords and even medical records. “Nothing breeds success like success – especially if you’re a cybercriminal,” Haley noted. “The potential for huge paydays means large-scale attacks are here to stay. Companies of all sizes need to re-examine, re-think and possibly re-architect their security posture.”

As far as targeted attacks are concerned, the report shows that their number increased by 91%. Each attack lasted, on average, three times longer than in the previous year. Individuals working in PR and personal assistants were the most attractive targets in such operations.

More details & screenshot here: http://news.softpedia.com/news/2013...s-552-Million-Identities-Exposed-436508.shtml