Stephen Foley: Calm down – despite the data breaches, there's little actual fraud on the cards
Saturday 11 June 2011
US Outlook: News of arrests in Spain of people believed to part of the hacker group Anonymous, responsible for attacks on Sony and MasterCard in recent months, comes on the heels of another big data breach here in the US. This time it was Citigroup that said its computers had been compromised, with hackers gaining access to credit card details of 200,000 North American customers. It is having to issue new cards.
Just another day, then, in the great war over our personal data.
The Citigroup breach, the largest direct attack on a US bank, has prompted inevitable calls for financial institutions to tighten security procedures, in the hope of staying one step ahead of the hackers. There has been criticism of banks for failing to invest the necessary money in improved security systems, but to my mind this seems unfair, and misses an important point. For all the security breaches, few have resulted in actual fraud on people's accounts. In the Citigroup case, those three-digit security codes on the back of its customers' cards were stored separately. So were their social security numbers, and the expiry dates of their cards. The likelihood of discovering a fraudulent transaction on a Citigroup card is low.
There have been 288 publicly disclosed breaches of financial services companies' computer systems, according to the Identity Theft Resource Centre, and 83 million customer records compromised. That would suggest that, even if you haven't been a victim, you would be likely to know at least one person who has – yet complaints about discovering dodgy transactions are not a staple of pub conversation.
None of this is to minimise the importance of these breaches, just to say that clearing up after them, by telling customers to reset passwords or issuing new cards, might be the best way to deal with them. Laborious new signing-in procedures are an unnecessary hindrance; in the UK, Barclays' requirement that you use a calculator-like device to generate a log-in code every time you go to its website has removed the whole point of internet banking, namely that you can access your account anywhere.
There are tighter rules needed. Citigroup, like Sony and others before it, ought to have revealed the existence of the security breach sooner than it did, so a code of conduct for communication with customers would be a good start.
But breaches are a fact of life in the modern era. The investment should come in technology to detect break-ins and to track down their anonymous perpetrators. As long as we get as many headlines about hacker arrests as we do about hacker attacks, we should be satisfied.
- 1 Christmas comes early to Hong Kong, as millions of bank notes spill out onto busy street
- 2 The 'Black Museum': After 150 years, public can visit police’s grisly crime museum
- 4 Vagina canoe artist facing two years in jail defends herself over ‘obscenity’ charges
- 5 The Queen’s speech 2014: Recap and Twitter reaction to Game of Thrones reference
PlayStation and Xbox hacked by Lizard Squad
Antonio Martin shooting: Black teenager may have tried to ambush patrolman, says police officer's lawyer
Katie Hopkins speaks out on childhood obesity: 'Parents of fat children should be prosecuted for child cruelty'
Boxing Day snowfall could push even more bargain-hunters online for Christmas sales
The 'Black Museum': After 150 years, public can visit police’s grisly crime museum
British actor Idris Elba cannot star as James Bond because he is black, says shock jock Rush Limbaugh
Rozanne Duncan: Ukip expels councillor for 'jaw-dropping' comments made in BBC TV interview
Germany anti-Islam protests: 17,000 march on Dresden against 'Islamification of the West'
Ukip member gets into Christmas spirit with Union Flag plea to Santa 'for our country back'
BBC director Danny Cohen: Rising UK antisemitism makes me feel more uncomfortable than ever
Alex Salmond has 'broken his word to the Scottish people' says Scottish Lib Dem leader
iJobs Money & Business
Highly Competitive: Selby Jennings: Our client, a leading European Oil trading...
£43500 per annum + pension + holidays: The Jenrick Group: Night Shift Operatio...
£20000 - £25000 per annum + OTE £40,000 + Car + Pension: SThree: SThree are a ...
£20000 - £25000 per annum + OTE £35K: SThree: We consistently strive to be the...