As we increase our reliance on online shopping, e-commerce companies and online payment service providers will continue to be a prime target for hackers as they often contain a wealth of customer’s data. The key takeaway from this recent incident is that cybercriminals do not look at auspicious timings before acting – the moment they detect any vulnerabilities in your system, they will take immediate action to exploit it.
With a single data breach costing over $1 million on average for businesses in Southeast Asia, businesses stand to lose an additional $186 million on business opportunities in the aftermath of a data breach. While it is heartening that our Global Corporate IT Security Risks Survey found that 84% of Southeast Asian businesses surveyed have made plans to increase their budget in IT security, there remain significant gaps when it comes to IT infrastructure hosted by third parties, as well as challenges pertaining to the migration of more advanced and complex technology environments.
This is why companies and individuals should be on their highest alert at all times. We should aim to inculcate a sense of responsibility on how users will handle their personal and corporate data inside their home networks. Likewise, companies should beef up their defenses to keep their corporate and customers’ data safe.
A data breach can have a devastating effect on an organization’s reputation and financial bottom line. This is the applicable to all sectors, including e-payment service providers. Below are some of the best practices to fend off one, especially for major ecommerce companies handling millions of financial data:
- Employ training and activities which will educate employees about cybersecurity basics, for example, to not open or store files from unknown emails or websites as they could be harmful to the whole company.
- Regularly remind staff how to deal with sensitive data, for example, to store only in trusted cloud services with authentication switched on, do not share it with untrusted third parties.
- Enforce use of legitimate software, downloaded from official sources.
- Make backups of essential data and regularly update IT equipment and applications to avoid unpatched vulnerabilities that can become a reason of a breach.
- Provide your Security Operations Center (SOC) team with access to the latest threat intelligence, and stay up-to-date with new and emerging tools, techniques and tactics used by threat actors and cybercriminals.
- For endpoint level detection, investigation and timely remediation of incidents, implement EDR solutions, such as Kaspersky Endpoint Detection and Response.
- In addition to adopting essential endpoint protection, implement a corporate-grade security solution that detects advanced threats at the network level at an early stage, such as Kaspersky Anti Targeted Attack Platform.
As a customer of a major company, if you learn that it has had a security breach, or if you find out that your own computer has been compromised, then you need to act quickly to ensure your safety. Remember that a security breach on one account could mean that other accounts are also at risk, especially if they share passwords or if you regularly make transactions between them.
We advise the following:
- If a breach could involve your financial information, notify any banks and financial institutions with which you have accounts.
- Change the passwords on all your accounts. If there are security questions and answers or PIN codes attached to the accounts, you should change these too. Use strong passwords, combine random strings of upper and lower case letters, numbers and symbols. Use a password manager to keep your passwords secure. Change your passwords regularly.
- You might consider a credit freeze. This stops anyone using your data for identity theft and borrowing in your name.
- Do not respond directly to requests from a company to give them personal data after a data breach, it could be a social engineering attack.
- Be on your guard for other types of social engineering attacks. A criminal who has accessed the accounts information, could contact the victims asking for more information like credit card, personal details.
- Monitor your accounts for signs of any new activity. If you see transactions you do not recognize, address them immediately.
- Close accounts you do not use rather than leaving them dormant.
- Be careful on the links you are about to click.
- When you are accessing your accounts, make sure you are using the secure HTTPS protocol and not just HTTP.
- Secure your phone. Do not root or jailbreak your phone. Install security apps.
By Yeo Siang Tiong, General Manager for Southeast Asia at Kaspersky
11 August 2022
