BREAKING NEWS“Ebay Had 145 Million Personal

Record’s Stolen in a Data Breach”

“Target Credit Card Breach Affects 110 Million Americans”

“Court Ventures Accidentally Loses 200 Million Personal Records”

From a Breached Credit Card to a Stolen Identity

Company Information SecurityReza Ameli

Independent ResearchEric Forte

APL/UMBC

Presentation-Overview

• I will…• Explain a data breach• Explain the effects of a data breach• Present company flaws in protecting consumer

information• Present consumer flaws in protecting their information• Explain what can be done to protect oneself from a

data breach

What is a data breach?

• Literally means to “get into” someone's data

• Occurs because of flaw in defense

• Information is copied or stolen

Effects of a Data Breach

• Causes major problems for consumers

• Information can be used years after attack occurs

• Affects consumers trust in a company

Why Companies Get Breached

Companies can get breached for many reasons– Not realizing the importance of defending

information– Not hiring a cybersecurity director, Target– Losing cybersecurity staff to other companies,

JPMorgan Chase– Not getting defense systems because the cost is

too great

Consumer Issues in Defending InformationOne major consumer problem is awareness

• “I am aware of the recent credit card breaches at Target and Home Depot.”

34.38%

18.75%

4.68%

17.19%

25.00%

Credit Card Breach Awareness

Strongly Agree Agree Neutral Disagree Strongly Disagree

Another issue with consumers is responsibility

• “I feel it is the credit card company’s job to defend my private/credit card information.”

41%

38%

17% 2%3%

Someone Else Should Defend Me

Strongly Agree Agree Neutral Disagree Strongly Disagree

What Can You Do?

• Become educated about data breaches

• Defend yourself if companies cannot

– Change you passwords for credit card accounts regularly

– Don’t use the same password for everything

– Check you credit card bill, especially after a data breach

Final Product

• A movie

– Help educate young people entering the world of credit cards

– Shown in several classes throughout the school

– Help to raise awareness of this rising problem

This is Not a Call to PanicThis is a Call to Action

• We are the generation that will have to deal with this issue

• Do not have to be the most secure person in the world

• Hackers target the least defended

Works CitedCenter for Strategic and International Studies. “The Economic Impact of Cybercrime and Cyberespionage.” July, 2013. PDF File.Donohue, Brian. "Cyberattacks Most Imminent Threat to U.S., Economy." Threat  Post. Kaspersky Labs, 28 Oct. 2014. Web. 1 Dec. 2014. <http://threatpost.com/cyberattacks-most-imminent-threat-to-u-s-economy/ 109039>. Douglas, Danielle, and Craig Timberg. "Target Breach Could Represent Leading Edge of Wave of Serious Cybercrime." The Washington Post. Washington Post, 9 Feb. 2014. Web. 7 Oct. 2014. <http://www.washingtonpost.com/business/ economy/target-breach-could-represent-leading-edge-of-wave-of-serious-cybercrime/ 2014/02/09/dc8ea02c-8daa-11e3-833c-33098f9e5267_story.html>. Gillils. "From Thin Air – Security in Complex Systems." MIT Geospatial Data Center. MIT, 21 Nov. 2013. Web. 18 Sept. 2014. <http://cybersecurity.mit.edu/2013/11/from-thin-air-security-in-complex-systems/>. http://icsnets.powerstormtech.com/wp-content/uploads/2014/07/IT-Security.jpghttps://lh5.ggpht.com/A3QygEOEBejphnxJKaAm1CN-PFsxKXM0-yKdRUb8cvtO6v7zRqUZKu41ZMBCdSG6ZdE=h900Peterson, Andrea, and Craig Timberg. "Stop Worrying about Mastermind Hackers. Start Worrying about the IT Guy." Washington Post [Washington D.C.] 17 Oct. 2014: n. pag. The Washington Post. Web. 19 Oct. 2014. <http://www.washingtonpost.com/blogs/the-switch/wp/2014/10/17/stop-worrying-about-mastermind-hackers-start-worrying-about-the-it-guy/>. Robertson, Jordan. "Internet Security." Bloomberg Quicktake. Bloomberg L.P., 28 Aug. 2014. Web. 8 Dec. 2014. <http://www.bloombergview.com/quicktake/ internet-security>. Roman, Jeffrey. "Chase Ramps Up Security: Is It Enough?" Bank Info Security. Information Security Media Group, 15 Apr. 2014. Web. 12 Jan. 2015. <http://www.bankinfosecurity.com/analyzing-chases-security-ramp-up-a-6753/ op-1>. Silver-Greenberg, Jessica, Matthew Goldstein, and Nicole Perlroth. "JPMorgan Chase Hacking Affects 76 Million Households." New York Times [New York] 2 Oct. 2014: n. pag. The New York Times. Web. 4 Dec. 2014. <http://dealbook.nytimes.com/2014/10/02/ jpmorgan-discovers-further-cyber-security-issues/?_r=0>. "Target Names Brad Maiorino Senior Vice President, Chief Information Security Officer." Target. Target Brands, 10 June 2014. Web. 12 Jan. 2015. <https://corporate.target.com/discover/article/Target-names-Brad-Maiorino-senior-vice- president-c>. United States. Department of Defense. Defending a New Domain. Washington: GPO. US Department of Defense. 2010. Web. 2 Oct. 2014. <http://www.defense.gov/ home/features/2010/0410_cybersec/lynn-article1.aspx>.Vaas, Lisa. "Target CIO Beth Jacob Resigns in Breach Aftermath." Naked Security 6 Mar. 2014: n. pag. Naked Security. Web. 12 Jan. 2015. <https://nakedsecurity.sophos.com/2014/03/06/target-cio-beth-jacob-resigns-in-breach- aftermath/>.