Data breaches have risen 480% in financial services firms
The number of data breaches reported by UK financial services firms to the Financial Conduct Authority (FCA) increased 480% in 2018, to 145 up from just 25 in 2017*, shows research from RPC, the City-headquartered law firm.
Data breaches are on the rise. And, the financial services sector is an especially lucrative target; along with the personal data bulging healthcare sector.
In the financial services sector, the retail banking sector saw the largest percentage increase in the number of data breach reports, rising to 25 in 2018 from only one in 2017.
This should raise concerns about the number of cyber criminals targeting bank accounts. Tesco Bank, for example, was fined £16.4m by the FCA in October 2018 as a result of a cyber attack that led to £2.26m being taken from personal current accounts**.
On the other side, RPC has revealed that wholesale financial markets firms–such as investment banks–reported the most data breaches to the FCA in 2018: 34 compared to just three in 2017.
An easy target?
According to the research, cybercriminals could be targeting investment banks in a belief that their security systems are less sophisticated than retail banks.
And the stakes are, potentially, a lot higher: confidential data held by investment banks on areas such as M&A can be used for insider trading. In the US, for example, the SEC is pursuing a number of insider dealing cases that relate to cyber breaches.
Other sectors within financial services that saw large increases in data breach reports include:
• Insurers — 33 in 2018, up from seven in 2017
• Consumer retail lending — 21 in 2018, up from four in 2017
• Retail investments — 11 in 2018, up from none in 2017 (see below for full breakdown)
In the research RPC explains that ‘while the data suggests that financial services businesses are suffering an increasing number of cyber attacks, these businesses are also perhaps getting better at identifying and reporting those attacks.’ (Which is a good thing!)
Reports of data breaches by financial services companies.
GDPR: a positive impact
June 2018, the first month after the introduction of the General Data Protection Regulation (GDPR), saw the highest monthly total of data breach reports, with 20 data breaches reported by financial services firms.
Richard Breavington, partner at RPC and head of their Cyber Insurance and Breach Response team, says: “Banks remain a top target for cybercriminals. The figures suggest that the banks are suffering data breaches on a frequent basis.”
“The increase in reports, however, does show that the financial services industry is now taking cyber security more seriously than ever. The financial and reputational fallout from a data breach can be serious for a business of any size. They must be ready to defend against — and respond to — breaches as efficiently as possible.”
Those reporting data breaches in financial services is on the rise.
Industry: Cyber Security News
- Identity & Access Management (IdAM) Consultant
- Upto €100,000 plus bonus and benefits
An Identity & Access Management Consultant is needed to lead and drive technical and or business transformation projects in a client-facing position for a prestigious consultancy in Germany. The Identity & Access Management Consultant will be responsible for technical design and implementation of Identity & Access Management/IAM products within a wide variety of clients. The Identity & Access Management Consultant will have a blend of technical hands-on and client-facing consultancy with the ability to develop new business. Broad technical knowledge across Identity and access management is benefical. The Identity & Access Management Consultant will need to have technical hands-on experience with one or more of the following core areas; Privileged Access Management (PAM, CyberArk, Beyondtrust, Thycotic) Identity Governance Administration (IGA, Sailpoint, Omada, RSA) Customer Identity & Access Management (CIAM, Forgerock PSD2) The Identity & Access Management Consultant must have the willingness to travel to customer sites across Germany (once we are allowed to)
- Cyber Vulnerability and Threat Hunter, London
REF CH7915 Cyber Vulnerability and Threat Hunter, London £50,000 London To monitor and identify cyber threats and vulnerability within a public sector environment. MIRE Att&ck, CIS, OWASP, Vulnerability management tools MUST be able to commute to central London MUST be able to achieve UK SC Clearance. On going support and development. Apply today for more information or contact me directly on Chris.Holt@dclsearch.com or 07884666351
- Ping Identity Consultant
- upto €850
Looking for experienced PIng Identity Consultants, Looking for consultant with Implemenation or Architect experience in the Ping identity product set (Ping Federate, Ping Access, Ping Directory, Ping Adapter development, SDK etc) This would be for implementation projects, working across Europe. You will be responsible for providing implementation services to our clients from information gathering through to implementation. Evaluating client business, process, systems, and technology requirements and advise clients on best practices to help guide and solidify proposed designs. Manage Client expectations, Stakeholder Managment, ensuring design match business requirements this is a remote role you can be based anywher in Europe
- Ping Identity Consultant
Looking for experienced PIng Identity Consultants, Looking for consultant with Implemenation or Architect experience in the Ping identity product set (Ping Federate, Ping Access, Ping Directory, Ping Adapter development, SDK etc) This would be for implementation projects, working across Europe. You will be responsible for providing implementation services to our clients from information gathering through to implementation. Evaluating client business, process, systems, and technology requirements and advise clients on best practices to help guide and solidify proposed designs. Manage Client expectations, Stakeholder Managment, ensuring design match business requirements this is a remote role, you can be based anywhere within Europe