HITECH data breach analysis
Chris Merritt over at Lumension did a quick analysis of the HHS breaches of healthcare data for ~4Q09. It pretty well repeats what most of us in the security industry have been harping on for years regarding healthcare information:
- Theft (not accidental loss) is the biggest vector both in terms of # of incidents and total records compromised
- The endpoint, NOT the datacenter, is your weak link
The picture is a bit different with respect to financial information and PII (application and endpoint security), but time after time we’ve shown that if I can pop your desktops, I can use them to pop your datacenter.
Leave a Reply