3 Reasons Your Employees Can Be More Dangerous Than Hackers – Insider Threat

Insider Threat to your Business

Who poses the biggest cybersecurity risk to your business? If your first thought was a Kremlin cyber-warfare unit, or a dark-web king-pin, you are wrong. The most likely source of a data breach at an SME is one of its own employees aka the insider threat.

According to recent research 54 per cent of breaches at small and medium-sized businesses come from an employee or contractor’s negligence. The number, alarmingly, had increased from 48 per cent when firms were asked the question a year earlier.

If you add in the 7 per cent of breaches that are caused by malicious insiders, then 61 per cent of all data breaches come from people on a company’s own payroll. That is almost double the number that are caused by hackers, who account for 33 per cent.

In reality the number which originate from employees could even be higher – in an astonishing 32 per cent of cases firms said they couldn’t even determine the root cause of a data breach. That is arguably the most disturbing statistic of all. If you don’t know how your data leaked, how can you protect yourself in future?

SMEs were asked: What was the root cause of data breaches at your company?

How do employees cause breaches?

Those numbers might surprise you, but in our experience they ring true. So how do employees cause breaches? Generally, there are three ways.

The first is carelessness. There’s a hundred ways to lose a laptop. Someone can leave it on a train or in a pub, and if the password is easy to guess it can be a goldmine. Once a thief is in you can be certain that he’ll strip it of every bit of data he can – emails, passwords, addresses, dates of birth. Given that he’s already nicked a laptop, he probably won’t hesitate to flog the lot to a fraudster.

The second is being too trusting. On their private email people are always on their guard for phishing emails. But work ones? The company’s systems will filter out anything dodgy, won’t they? It is because people make this assumption that phishing attacks from work emails are so successful. Once they are in, fraudsters don’t exactly shout about it. We’ve all heard too many stories about high-turnover businesses who didn’t realise for months that money was being nicked.

The third common cause of data breaches is revenge. It’s far less common than a cock-up, but as I mentioned above, it accounts for 7 per cent of data breaches at SMEs. If a disgruntled employee decides to pinch personal data or mangle your CRM system, for example, the damage could be irreparable.

How can we help ?

It’s not too difficult to stop any of this happening. All you need are proper systems and training, but we see time and time again that SMEs decide that they can save money on IT security. That’s understandable, but the cost of not doing it properly could be far higher.

To talk to us about how to protect yourself from the insider threat and data breaches today by getting in contact with us here or calling 07958 545129

Past Blogs

benefits of cybersecurity

Benefits of CyberSecurity

The benefits of cybersecurity. With vast amounts of information are stored online, the benefits of robust cybersecurity are more vital than ever. At Network &...
what is dmarc

What is DMARC

What is DMARC and Why Does Your Business Need It? When it comes to protecting your business from cyber threats, email security is often overlooked. Yet, email is one of...
Why is password management software important

Why is Password Management Software Important

Why is Password Management Software Important for Your Business? In today’s digital world, passwords are the keys to your business’s most sensitive information. From...
What is Email Filtering ?

What is Email Filtering and Why Every Business Needs It

Email is the lifeblood of business communication, but it’s also one of the most vulnerable entry points for cyberattacks. According to research, 96% of cyber threats...
What’s your business’s view on Return to Office?

What’s your business’s view on Return to Office?

Do you love keeping your employees happy by allowing them to work remotely? Or do you think everyone is more productive in the office? Businesses are divided on this...
Outdated backup systems could leave your business vulnerable

Outdated backup systems could leave your business vulnerable

When did you last review your business’s backup tools? Outdated backup systems can fail to protect you from modern threats, like ransomware attacks. If you want a...
Microsoft’s fixing this annoying Windows 11 fault

Microsoft’s fixing this annoying Windows 11 fault

Fed up seeing useless “Recommendations” in the Windows 11 Start menu? Good news – Microsoft’s making them more helpful. Here’s how the improvements could help your team...
Beware that corrupted email attachment: It could be a scam

Beware that corrupted email attachment: It could be a scam

Cyber criminals get more creative every day. The latest scam designed to steal your business data uses corrupted Word files – and getting fooled is easier than you...
Are your employees your security’s weakest link?

Are your employees your security’s weakest link?

Great employees have the same goals you do. But while they’re working hard to help your business succeed, they could accidentally be opening the door to cyber...
The two big threats of doing business on public Wi-Fi

The two big threats of doing business on public Wi-Fi

Public Wi-Fi can be a lifesaver when you must send an urgent email while out of the office. But did you know it can also put your business data at risk? These are the...