Survey Finds 45 Percent Of Businesses More Concerned About Data Breaches

May 27, 2008

A recent national survey of more than 1,500 business leaders conducted by Zogby International on behalf of Identity Theft 911 found that business decision makers possess an alarming “air of invincibility” when it comes to their companies’ potential exposure to a data breach. Suffering a breach ranked last among the biggest business fears behind government fines, lawsuits, bankruptcy and natural disasters.

Forty-five percent admit they are more concerned about data breaches than in the past, however that figure pales in comparison to the fact that 30 percent are more concerned that they could personally become a victim of identity theft (76 percent vs. 45 percent).

While respondents don’t appear particularly worried about being hit by a breach or the damage control it will require, they do consider protection essential to customer service. 86 percent think safeguarding customer data is a high priority and 83 percent believe that a breach would definitely have an impact on business reputation.

For all of the stated concern, it appears very little customer/employee protection is being implemented, as nearly two fifths do not have an incident response plan or outside vendor management procedures in place. The survey also found another third does not encrypt customer/employee data that contains personally identifiable information.

Findings include:

  • 34 percent of the businesses have no tools/procedures in place to detect identity fraud.
  • 44 percent report that a security breach would have minimal to no financial impact on their business with another 22 percent reporting that they don’t know what the financial impact would be.
  • 4 percent reported that their business had a data compromise and the greatest cause was the fault of an outside vendor followed by loss/theft of hard copy files and hacker infiltration.
  • Some of the words that the respondents used to describe the emotional effects of a data breach include “devastating,” “disastrous,” “loss of reputation,” “loss of customer confidence & trust” and “embarrassing.”
  • Some phrases used to describe the financial effects include: “bankruptcy,” “business termination,” and “lawsuits.”

“The survey confirms a head in the sand mentality regarding the threat to businesses today which we call a `data breach awareness gap’,” said Judd Rousseau, Chief Fraud Officer for Identity Theft 911. “Many decision makers still haven’t implemented the proper security measures to protect their company, customers and employees.”

Poll

What should the AirTran pilots have done after being told of remarks from Muslim passengers on the New Year’s Day flight?