Breaking News
REDDIT’S ‘EXTREMELY CONCERNING RESPONSE’ TO DATA BREACH: FIDELIS CYBERSECURITY COMMENTS
Reddit has suffered a data breach – but it’s the organisation’s response that is causing some concern. The social media site discovered in June that hackers compromised several employees’ accounts to gain access to databases and logs. They were able to obtain usernames and corresponding email addresses, information that could make it possible to link activity on the site to real identities. The firm is notifying users about an older breach but has told users potentially affected by the newer one that they must proactively search their inbox for emails around the time of the breach to see whether they may have been impacted.
Andrew Bushby, UK director at Fidelis Cybersecurity, made the following comment on the breach:
“This is an extremely concerning response to a data breach, as the onus has been placed on the user to first determine if they were impacted and then to evaluate the potential repercussions themselves. It’s surprising to see an organisation dismiss its duty of care in such a public way – particularly one whose reputation as a safe haven for anonymous opinions has now been jeopardised. What’s more, if European citizens were in fact impacted, it could pose a real GDPR conundrum for the organisation.
“Broadly, this incident shines a light on the need for more robust, layered security measures around sensitive data. Network intrusions are now inevitable, but it’s what happens next that can really make or break an organisation. With the sophistication and persistence of today’s cybercriminals, security teams need to have real visibility of what’s happening to their systems at all times, providing the ability to proactively find unknown threats, and not just in the aftermath of an attack. Serious questions must be asked about the security measures around the data, Reddit’s reluctance to properly notify affected users and the overall response by its spokespeople.”
- CLS Appoints Six New Board Directors Read more
- Mobey Forum Calls for a Collaborative Approach to Fraud Prevention in Rethinking Fraud in a Connected World Read more
- SumUp Launches in Canada Read more
- European Fintech Association Elects New Board of Directors Read more
- G+D: Navigating the Future of Fintech Agility and Innovation Read more
