Data Breaches Cost Companies Over $1 Mn: McAfee


NEW DELHI: As organizations try to counter the growing threat from Advanced Evasion Techniques (AETs), a study commissioned by security technology firm McAfee today said that data breaches have cost firms over $ 1 million on an average in the last 12 months.

The study, Security industry's dirty little secret, which was conducted by technology market research firm Vanson Bourne examines the controversy and confusion surrounding AETs and the role they play in Advanced Persistent Threats (APTs).

AETs is a network attack that combines different known evasion methods to create a new technique that is delivered over several layers of the network simultaneously and provides the attacker with undetectable access to the network.

"On average, those who experienced a breach in the last 12 months reported a cost to their organization of upwards of $ 1 million," the study said.

It added that some of the recent high profile data breaches have demonstrated that criminal activity can still evade detection for a long period.

The study covered 800 CIOs (Chief Information Officers) and security managers from the U.S, the U.K, Germany, France, Australia, Brazil and South Africa.

It showed that misunderstandings, misinterpretation and ineffective safeguards in use by security experts charged with protecting sensitive data.

"Survey respondents acknowledged this and more than one in five security professionals admit their network was breached (22 percent). Nearly 40 percent of those breached believe that AETs played a key role," the study said.

About 40 percent of the IT decision-makers covered said they do not believe having methods to detect and track AETs within their organization, it added.

Almost two-thirds of respondents said the biggest challenge, when trying to implement technology against AETs, is convincing the board that they are a real and serious threat, it said.

Of the estimated 800 million known AETs, less than one percent is detected by other vendor's firewalls. The prevalence of these techniques has risen significantly since 2010 with millions of combinations and modifications of network-based AETs having been identified to date, McAfee said.

Read Also: Skillsoft And IBM Reveal New Capabilities For Big Data and SAP Appoints New Managing Director of SAP India

Source: PTI