Security experts warn that the number of data breaches and attacks in the Channel Islands could be four times higher than official figures suggest, due to a lack of reporting.<\/p>\n
The Information Commissioner’s Office (ICO) revealed that Jersey reported 52 cases of data protection breaches, while Guernsey reported a further 43. However, according to Business Development and Technical Director of IT security firm Logicalis<\/em>, Tom Bale, these figures may only be a quarter of the real sum as not all companies and organisations report breaches to the authorities. Bale explains that current laws mean “there’s no obligation for organisations in the Channel Islands to report data breaches”. <\/p>\n It’s possible that many firms choose not to report data breaches and cyber-attacks as they may be worried about losing customer confidence. With reputations at stake, firms risk losing business and therefore losing money.<\/p>\n Further, a lot of companies reportedly “don’t even realise they have suffered a security breach until months after the incident”, continues Bale. Many companies reportedly neglect their data protection duties by not implementing security measures to detect attacks and breaches, meaning large volumes of data could be, or have been, exposed or stolen for many months without the company having any clue.<\/p>\n Data breaches can happen to anyone. Continual coverage of huge data breaches, like the HBO and Sony hackings, may give the false perception that attackers only target huge companies<\/strong> who hold vast quantities of data. But this isn’t always the case, as smaller businesses can potentially be more susceptible to data breaches<\/strong> as they may lack the resources required to invest in decent cybersecurity.<\/p>\n These kinds of vulnerabilities can be identified and exploited by hackers.<\/p>\n Of course, data breaches are not just from hacks and other malicious attacks from third parties. A lot of data breaches occur due to human error; i.e. employee mistakes. Many a time have we seen poorly trained or careless employees accidentally send confidential information to someone other than the intended recipient. Mistakes like this can be commonplace but still need to be taken seriously. These kinds of preventable data breaches still carry very real consequences and can happen to any organisation in theory.<\/p>\n
\n<\/p>\nNo obligation to report breaches<\/h2>\n
It’s not just the “big players” at risk…<\/h3>\n
A cause for concern<\/h3>\n