20% Of Broadly Shared Data Contains Regulated Info

Forget shadow IT. The new problem is shadow data.

Youre already worried about shadow IT -- the applications, mobile devices, and cloud services your users are using without your OK -- but what about shadow data? Even if your users are only using the file-sharing technology you gave them, youre not necessarily protected from over-sharers -- the people who share data (even sensitive data) with the entire organization, external parties, or the general public.
Twenty percent of such broadly shared files contain regulated data, according to
research released today by Elastica
. Of that data, 56% was personally identifiable information, 29% was personal health information, and 15% was PCI-protected credit card data.
That all adds up. On average, each user has over 2,000 files stored on the cloud, and 185 of those (about 9%) are broadly shared, according to the research. Yet averages, in this case, are misleading -- which is good news.
Most [data sharing] violations, says Elastica CEO Rehan Jalil, are casually coming from a small group of users. In fact, 85% of the total risk exposures are attributable to only 5% of users. Identify and rope in those users, and most of the problem is treated. (The research cannot tell us whether or not those 5% share any common characteristics, from company to company, because the data was anonymized before it was analyzed.)
The most surprising thing [about the research] was that, even for IT-blessed file-sharing applications, users behavior is very casual at this point, says Jalil. They share [files] however they want.
Some of the ways in which files are over-exposed include shared folders that are accessible to employees who dont need access to the data, folders in the cloud that continue to be accessible to users who have left the company, direct links to files emailed to people inside and outside the company, or unchanged default settings that make files public.
Jalil says that protecting against shadow data in the cloud requires IT security professionals to adopt a completely new mindset, because on the surface, it looks like a managed service, but in truth, it isnt managed very well.
Read the full report, in the form of an infographic,
here
.

Last News
▸ Sony, XBox Targeted by DDoS Attacks, Hacktivist Threats ◂ Discovered: 23/12/2024 Category: security	▸ There are plenty of online tools for reporting bugs. ◂ Discovered: 23/12/2024 Category: security	▸ 27 Million South Koreans Hit by Online Gaming Theft. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
20% Of Broadly Shared Data Contains Regulated Info