Uber fined £385,000 for losing UK customer data

The Limits of Fines in Addressing Data Breach

In recent years, data breaches and cybersecurity incidents have become a pervasive issue. High-profile cases, such as the 2016 Uber data breach, have highlighted the need for more robust security measures to protect sensitive information. The Uber breach resulted in the loss of full names, addresses, and phone numbers of 2.7 million users, leading to significant fines imposed by various governments. Despite these penalties, the problem of hacking persists, and it is worth examining whether fines are a sufficient deterrent or if they inadvertently contribute to the problem.

Uber fined £385,000 for losing UK customer data
Uber fined £385,000 for losing UK data in data breach

The Circular Economy of Fines and Cybercrime

One significant disadvantage of imposing fines in response to data breaches is the potential to inadvertently create a circular economy that benefits cybercriminals. When companies pay large fines, either through insurance or shareholder funds, governments may treat these as revenue earned. Meanwhile, the true victims of the breach are left compromised and without recourse.

Additionally, when companies like Uber pay hackers to destroy stolen data, they may encourage other cybercriminals to target their organization, viewing them as a lucrative paymaster. Moreover, negotiating with and entering into agreements with hackers can inadvertently legitimize cybercriminals, further exacerbating the problem.

The Need for Proactive Investment in Cybersecurity

Despite the prevalence of hacking incidents, many companies are not investing enough in cybersecurity measures, often relegating the issue to mere lip service. A more effective approach would be to prioritize investment in robust cybersecurity infrastructure, employee training, and risk mitigation. This proactive strategy could reduce the likelihood of future data breaches and minimize the negative consequences for both companies and their customers.

These high-profile hacking cases and stories have normalized the severity of hacking data loss, and most companies are neither investing enough nor taking this beyond lip service.

Imagine what would happen if some broken in to the neighborhood and stole 5 credit cards out of 5 different homes, what reaction would the people have at the Sheriff’s office.

You can read the full story here Source link

I try to post articles on my website, one for referencing back when you are writing something or researching, and two to share with everyone.

If you like this story you should check out some of the other stories in this section.

MMasood

Mani Masood

A respected ICT professional, with 18 years of industry experience. Mr. Masood has affiliations...