Q3 Notifiable breaches industry league results: Health first … lawyers a solid third!
By Cameron Abbott, Keely O’Dowd and Colette Légeret
The Office of the Australian Information Commissioner (OAIC) has released its third quarterly report of notifiable data breaches. This is the second OAIC report to be released covering a full quarter.
The report revealed that OAIC received 245 notifications of data breaches, marginally up from 242 notifications in the second quarterly report.
Some interesting figures from the OAIC’s report are as follows:
- 18% of notifications were from health service providers, 14% were from the finance sector; 14% were from the legal, accounting and management services sector; 7% were from the private education sector, and 5% were from the personal services sector;
- 85% of data breaches involved individual’s contact details, 45% involved financial details, 35% involved identity details, 22% involved health details, 22% involved tax file numbers, and 7% involved other types of personal information; and
- 57% of data breaches were due to malicious or criminal attack, with 37% due to human error, and 6% due to system faults, with cyber incidents, namely compromised credentials or phishing being the main the cause of
Of the 245 data breaches, 58 affected only one individual – however, 7 affected more than 10,000 individuals.
These figures are a clear reminder of the need to ensure that your business is equipped to deal with data breaches. To learn more about this, take a look at this 60-second video by Cameron Abbott. With professional services ranking a solid third, we’ll take some of our own advice too!