Stephen Foley: Calm down – despite the data breaches, there's little actual fraud on the cards
Saturday 11 June 2011
US Outlook: News of arrests in Spain of people believed to part of the hacker group Anonymous, responsible for attacks on Sony and MasterCard in recent months, comes on the heels of another big data breach here in the US. This time it was Citigroup that said its computers had been compromised, with hackers gaining access to credit card details of 200,000 North American customers. It is having to issue new cards.
Just another day, then, in the great war over our personal data.
The Citigroup breach, the largest direct attack on a US bank, has prompted inevitable calls for financial institutions to tighten security procedures, in the hope of staying one step ahead of the hackers. There has been criticism of banks for failing to invest the necessary money in improved security systems, but to my mind this seems unfair, and misses an important point. For all the security breaches, few have resulted in actual fraud on people's accounts. In the Citigroup case, those three-digit security codes on the back of its customers' cards were stored separately. So were their social security numbers, and the expiry dates of their cards. The likelihood of discovering a fraudulent transaction on a Citigroup card is low.
There have been 288 publicly disclosed breaches of financial services companies' computer systems, according to the Identity Theft Resource Centre, and 83 million customer records compromised. That would suggest that, even if you haven't been a victim, you would be likely to know at least one person who has – yet complaints about discovering dodgy transactions are not a staple of pub conversation.
None of this is to minimise the importance of these breaches, just to say that clearing up after them, by telling customers to reset passwords or issuing new cards, might be the best way to deal with them. Laborious new signing-in procedures are an unnecessary hindrance; in the UK, Barclays' requirement that you use a calculator-like device to generate a log-in code every time you go to its website has removed the whole point of internet banking, namely that you can access your account anywhere.
There are tighter rules needed. Citigroup, like Sony and others before it, ought to have revealed the existence of the security breach sooner than it did, so a code of conduct for communication with customers would be a good start.
But breaches are a fact of life in the modern era. The investment should come in technology to detect break-ins and to track down their anonymous perpetrators. As long as we get as many headlines about hacker arrests as we do about hacker attacks, we should be satisfied.
- 1 Autistic adults could take pure MDMA to 'reduce social anxiety'
- 2 Before you complain about your GP, this is what you need to know about actually doing the job
- 3 Father of 12 accused of raping, beating, starving and abusing his own children in US 'cult'
- 4 Britain's Got Talent 2015: Jamie Raven divides Twitter as fans expose mind-boggling magic trick
- 5 Charlie Charlie Challenge explained: not a Mexican demon being summoned — it's gravity
EU referendum: David Cameron's rules are a 'democratic disgrace', says French-born Scottish politician set to be denied a vote
SNP fury as HS2 finds 'no business case' for taking fast train service to Scotland
Australian man punched in the face for defending Muslim women from abuse on train
A nation of inequality: How the UK is failing to feed its most vulnerable people
David Starkey 'tells Amal Clooney to shut up and stop over-promoting human rights'
EU referendum: David Cameron to deny EU migrants and under-18s the chance to vote
iJobs Money & Business
£30 - 35k: Guru Careers: We are seeking a Pricing Analyst to join a leading e-...
£20000 - £25000 per annum + OTE £45K YR1: SThree: At SThree, we like to be dif...
£20000 - £25000 per annum + competitive: SThree: Did you know? SThree is a mul...
£55 - 65k (DOE): Guru Careers: A unique opportunity for a permanent C# Develop...