Lessons Learned from Companies That Have Been Hacked

Over the course of the past few years, company data breaches and cyber security attacks seem almost commonplace.  It seems like the list of companies that have been hacked keeps growing — and many of these companies are household names. But anyone can be the target of destructive technologies. So when we look at what went wrong, there are often lessons that apply to the rest of us. Lesson that can help us protect our own businesses and stay out of harm’s way.  Here are a few of our takeaways:

Lesson #1:  Encrypt Your Portable Devices

Coca-Cola learned this lesson the hard way in 2013 when an employee stole 55 laptops from the company’s Atlanta headquarters between 2007 and 2013. As many as 74,000 employees, contractors and suppliers, were left vulnerable to identity thieves, who used their personal information to make purchases, open new accounts — even apply for jobs.

How to Help Lower Your Risk

Encrypt your company’s laptops and other portable devices, so if any of them are lost or stolen, it will be more difficult to access your data. You’ll also want to perform a clean wipe on all computers that are returned when employees leave your company.

Lesson #2:  Be Wary of Insider Threats

The Coca-Cola breach is also a prime example of the damage employees (and former employees) can inflict on businesses that aren’t prepared to handle insider threats. In addition to stealing equipment and data, employees can accidentally download potential viruses and malware or put your data at risk by sending unencrypted files.

How to Help Lower Your Risk

While Data Loss Prevention (DLP) solutions can help, it’s also important to train your employees on company policy, look for trends in suspicious user behavior, and be wary of employees who fit these at risk profiles.

Lesson #3: Your People Can Be Your Weakest Link or Your First Line of Defense

In March of 2011 a group of hackers posed as people RSA employees trusted to gain access to the company’s network. It is estimated that around 40 million employee records were stolen.

How to Help Lower Your Risk

While it’s good to update your software, put up firewalls and install anti-virus software, an experienced social engineer can bypass all of that with one phone call or email.  That’s why it’s so important to train your people. If they know what to watch out for and how to respond, your IT infrastructure will be that much safer.

Lesson #4:  Critical Updates Are Critical

In April of 2014, Premera Blue Cross received a report from federal auditors that they were vulnerable to a cyber attack.  The audit said that the company wasn’t installing critical updates and patches in a timely manner — and software vendors no longer supported some of their applications.  Three weeks later, the company was hacked.

How to Help Lower Your Risk

When you keep your infrastructure up to date, you keep your virtual fortress strong and less vulnerable to cyber security attacks. That’s why it’s so important to install updates and patches right away, and to have your infrastructure monitored for possible weaknesses.

Protect What’s Yours

In some cases, companies that have been hacked could have done things differently. Other times, they put preventative measures in place, and an attack still happened. No one is immune, but prevention is key. So if you’re concerned that your IT infrastructure is vulnerable, talk to UDT.  We can take a look at your entire data center and make recommendations based on your needs and your budget. Contact us for a free consultation.

Accomplish More With UDT

Get your custom solution in cybersecurity, lifecycle management, digital transformation and managed IT services. Connect with our team today.

More to explore

Crafting a Futureproof 1:1 Device Strategy for School Districts

In the evolving landscape of Education Technology, crafting a futureproof 1:1 device strategy is crucial. This strategy should link every student, teacher, and administrator experience with specific device specifications. The integration of educational apps into the curriculum can significantly enhance the learning environment. These apps, tailored to the needs of students, can provide interactive content, fostering a dynamic learning experience.

Optimizing Your K12 Tech Investments: Funding 1:1 Device Programs

This blog will guide school districts grappling with the financial and resource demands of implementing a successful 1:1 device program amid ongoing challenges of budget constraints and competing priorities. Our guided workbook, created in partnership with Intel, provides further support with personalized roadmap on “Pathways to Innovation: Building a Sustainable Digital Learning Environment”.​

K12 Cybersecurity: How to Secure 1:1 Devices in Your School District

This blog post delves into the importance of security, cybersecurity, and data privacy in school districts implementing 1:1 device initiatives. It offers basic steps for evaluating, planning, and executing a security strategy. Our guided workbook, created in partnership with Intel, provides a personalized roadmap on “Pathways to Innovation: Building a Sustainable Digital Learning Environment”.

Lost & Stolen Devices are a Serious Data Security Threat—Here’s Why

Since the pandemic, remote and hybrid work has become the norm. While mobile devices and remote workstations have empowered great flexibility, it has also led to an increase in data security problems due to lost, misplaced, or stolen devices. Find out how remote and hybrid setups are contributing to this problem and how to protect yourself and your organization.​

Ransomware Gangs Adding Pressure with ‘Swatting’ Attacks—Here’s What You Need to Know

Ransomware gangs are implementing new extortion tactics to encourage victims to pay up. Swatting is becoming an increasingly popular tactic. It involves calling law enforcement to falsely report a serious, in-progress crime triggering an extreme response such as an armed raid from the SWAT team. Explore how cybercriminals are using this tactic and what you can do to prevent it from happening to you.​

Smishing Attacks are on the Rise—Here’s How To Keep Your Data Safe

Smishing attacks are on the rise, posing a significant threat to data security. Originating from a blend of SMS and Phishing, these attacks have seen a drastic increase since 2020. The widespread use of smishing attacks has persisted, with a lack of awareness being a major issue. Many view these as simple spam messages, unaware of the danger they pose. This blog aims to raise awareness about smishing and provide actionable insights to protect yourself and your organization.

Experiencing a security breach?

Get immediate assistance from our security operations center! Take the following recommended actions NOW while we get on the case:

RECOMMENDED IMMEDIATE NEXT ACTIONS

  1. Determine which systems were impacted and immediately isolate them. Take the network offline at the switch level or physically unplug the systems from the wired or wireless network.
  2. Immediately take backups offline to preserve them. Scan backups with anti-virus and malware tools to ensure they’re not infected
  3. Initiate an immediate password reset on affected user accounts with new passwords that are no less than 14 characters in length. Do this for Senior Management accounts as well.

Just one more step

Please fill out the following form,