An Exploratory Analysis of Data Breaches from 2005-2011: Trends and Insights

Ramakrishna Ayyagari

Journal of Information Privacy and Security, 2012, vol. 8, issue 2, 33-56

Abstract: Data breaches have become one of the biggest problems for organizations, costing an average of $7.2 million per breach (Symantec, 2011). Previous research on data breaches has focused on: (i) reducing the possibility of data breach by addressing employee compliance behavior, and (ii) understanding the impact of data breaches on organizations. We extended this research by content analyzing 2633 unique data breaches that resulted in loss of more than 500 million individual records. Our results indicate that data breaches continue to be a major issue for organizations. The results imply that the nature of the data breaches is changing. Data breaches are typically associated with hacking - however, our results indicate that breaches due to hacking are decreasing, whereas breaches due to ‘human element’ are increasing. One disconcerting result from our analysis is that data breaches that can be directly attributed to implementation and enforcement of security policies account for a major share. Collectively, the results indicate that organizations need to implement effective training and stricter enforcement of security policies.

Date: 2012
References: Add references at CitEc
Citations: View citations in EconPapers (4)

Downloads: (external link)
http://hdl.handle.net/10.1080/15536548.2012.10845654 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:taf:uipsxx:v:8:y:2012:i:2:p:33-56

Ordering information: This journal article can be ordered from
http://www.tandfonline.com/pricing/journal/uips20

DOI: 10.1080/15536548.2012.10845654

Access Statistics for this article

Journal of Information Privacy and Security is currently edited by Chuleeporn Changchit

More articles in Journal of Information Privacy and Security from Taylor & Francis Journals
Bibliographic data for series maintained by Chris Longhurst ().