Day by day, millions of people use a computer connected to the Internet for our daily tasks. Without knowing it, we may be causing harm to ourselves and to our company. The ICO (Information Commissioner’s Office) has put numbers to these facts and they are chilling. Not only can a cybercriminal cause problems to a company's information.
According to this study, carried out in the first quarter of this year 2021, data leaks by the staff themselves have been the main cause of reported cybersecurity incidents, we are talking about a 57% of cases totaling more than 1000 incidents.
Among these incidents, more than 400 han sido emails enviados a personas que no eran realmente sus destinatarios y en segundo lugar tenemos incidentes tipo Phishing a causa de empleados picando en emails maliciosos.
Si tenemos que clasificar el tipo de usuarios afectados, la gran mayoría es personal sanitario, con más de 400 incidentes reportados. Por cuarto trimestre consecutivo, este es el sector más atacado, por delante de servicios financieros e industria. Este tipo de incidentes son, en su práctica totalidad, Phishing attacks.
Tony Pepper, CEO de Egress (una compañía de software enfocada a la seguridad) destaca que el riesgo interno es la vulnerabilidad más compleja y que este estudio de ICO pone cifras a estas amenazas. Desde correos electrónicos enviados incorrectamente hasta fugas de datos, pasando por ataques Phishing, very few companies pay attention to the possibility of these incidents happening.
Although technology can help us avoid cybersecurity risks, it is time for companies to take action and raise awareness among their employees to protect valuable information that can be vilely used by cybercriminals. Nosotros, los usuarios, we are the first barrier against a possible cyberattack.
Image: Pixabay
Fountain: Help Net Security