Data Breach Costs: Scare Tactic No More

<p>We now know more than we’ve ever known about the true cost of a data breach. In addition to survey-based research, costs are discussed openly in quarterly reporting calls, made available via court documents, reported in the news, and apparent in stock values. The available information has taught us that data breach cost totals are staggering.  </p><p>So, just what is the real cost of a data breach? To help answer this question, here is a look at several recent and past headline-making incidents.</p><p>May 13, 2019, <a href="https://www.scmagazine.com/home/security-news/data-breach/equifax-data-breach-recovery-costs-pass-1-billion/" target="_blank">SC Magazine</a>: Equifax data breach recovery costs pass $1 billion. According to the story:</p><blockquote><p>In Equifax’s latest Security and Exchange Commission filing the company is estimating it has spent about $1.4 billion recovering from its 2017 data breach that exposed the PII of 148 million customers, according to a published report.</p></blockquote><p>May 15, 2019, <a href="https://www.infosecurity-magazine.com/news/companies-stock-value-dropped-1/" target="_blank">Info Security Magazine</a>: Companies' Stock Value Dropped 7.5% after Data Breaches. This is a story about a study of how breaches impacted Marriott, Equifax, and Yahoo! According to the news:  </p><blockquote><p>Publicly traded companies suffered an average drop of 7.5% in their stock values and a mean market cap loss of $5.4 billion per company, and it reportedly took 46 days, on average, for those stock prices to return to their pre-breach levels. To date, the stock price of Equifax has not yet recovered.</p></blockquote><p>March 29, 2018, <a href="https://www.cnbc.com/2018/03/29/under-armour-stock-falls-after-company-admits-data-breach.html" target="_blank">CNBC</a>: Under Armour says data breach affected about 150 million MyFitnessPal accounts. According to this story:</p><blockquote><p>Shares of Under Armour dropped 3.8 percent, before paring losses, after the active-wear company informed users of its online fitness and nutrition website their data had been compromised.</p></blockquote><p>March 19, 2018, <a href="https://www.theverge.com/2018/3/19/17139642/facebook-stock-fall-market-cap-data-breach-cambridge-analytica" target="_blank">The Verge</a>: Facebook stock tanks after data breach report, shaving billions off the company’s market value. According to the news:</p><blockquote><p>Facebook’s stock has tanked after revelations that the company had shared the data of up to 50 million users with the political data analytics company Cambridge Analytica. By noon ET on Monday, it’s dropped by nearly 7 percent — the most that Facebook has fallen in a single day in over five years.</p></blockquote><p><strong>Scare Tactic, Hardly</strong></p><p>There was a time when pointing out the negative economic factors driven by data breaches was considered to be a “scare tactic” used by some vendors. The negative economic factors that follow a breach are no longer the subject of speculation though. As the aforementioned shows, data breach costs are now indisputable monetary facts. They exist regardless of how frightening they may or may not be. The truth about them is something that no organization can afford to disregard.</p><p><strong>Avoiding the High Cost of a Breach</strong></p><p>The only way to reduce the risk of being impacted by a data breach is to either stop doing business on the internet or to take steps to defend against threats. The former isn’t likely to happen at your company anytime soon (even if it did, you’d still have that “air gap” thing to contend with).</p><p>To protect your organization against cyber threats, you will have to take a multi-layered approach, which includes the use of traditional technologies and newer innovations. No single vendor has a security silver bullet.</p><p><strong>How Anomali Helps</strong></p><p>It is becoming widely accepted that enterprises which utilize <a href="https://www.anomali.com/resources/what-is-a-tip" target="_blank">threat intelligence</a> as part of their security stacks are better able to address cyber threats. The value threat intelligence provides has prompted leading analyst firms such as Gartner, Forrester, IDC, ESG, and 451 to write about it extensively.</p><p>The <a href="https://www.anomali.com/platform" target="_blank">Anomali Threat Platform</a> automates all processes for collecting, managing and <a href="https://www.anomali.com/app-store" target="_blank">integrating threat intelligence</a> from multiple sources. This gives security analysts the tools and resources needed to quickly respond to active threats and attacks. With the help of Anomali, organizations are detecting their adversaries, understanding who they are, and quickly responding to them. To learn more about the Anomali platform, get the <a href="https://www.anomali.com/resources/ebooks/managing-threat-intelligence-playbook" target="_blank">Managing Threat Intelligence Playbook</a>.</p>