Study: Insider-Driven Data Loss Events Cost an Average of $15 Million Per Incident

  • Mar 11, 2024

Code42 Software recently released its annual Data Exposure Report (DER) for 2024, examining the intricacies of insider threats facing organizations today. The study found that data loss from insiders poses increased threats to security, further exacerbated by the introduction of AI and generative AI (GenAI) technology.

Since 2021, there has been a 28% average increase in monthly insider-driven data exposure, loss, leak, and theft events. The majority of respondents (85%) expect this trend to continue over the next 12 months. While most companies (99%) have data protection solutions in place, 78% of cybersecurity leaders admit they’ve still had sensitive data breached, leaked, or exposed. As today’s risks are increasingly driven by AI and GenAI, the way employees work, and the proliferation of cloud applications, respondents state they need more visibility into source code sent to repositories (88%), files sent to personal cloud accounts (87%), and customer relationship management (CRM) system data downloads (90%).

“Today, data is highly portable. While AI and cloud technologies are igniting new business ventures that allow employees to connect, create, and collaborate, they also make it easier to leak critical corporate data like source code and IP,” said Joe Payne, President and CEO of Code42. “This year, the research highlights the new challenges posed by AI as data sets are being pushed outside of organizations to train LLMs. We also see that source code is now considered the most important data to protect, other than financial information and research data. This is a critical finding, as most data protection tools are incapable of spotting the most common source code exfiltration techniques."

The cybersecurity skills gap creates a black hole for IP loss and compliance

Over three-fourths surveyed (79%) believe their cybersecurity team has a shortage of skilled workers, leading cybersecurity leaders to turn to AI (83%) and GenAI (92%) technology to fill the talent gap; but these aren’t a 1:1 replacement, and the report also cautions against the possible data loss risks of these tools.

The study also found:

  • Two-thirds of cybersecurity leaders (68%) state that data regulations are unclear, while even more (73%) are not fully confident their company is complying with new data protection laws
  • The vast majority (98%) believe their data security training requires improvement, with almost half of respondents (44%) believing it requires a complete overhaul
AI and GenAI are creating unique risks to data security The vast majority (85%) of cybersecurity leaders agree that their company’s sensitive data is increasingly vulnerable to new AI technologies.

The study also found:

  • 87% are concerned their employees may inadvertently expose sensitive data to competitors by inputting it into GenAI
  • 87% are concerned their employees are not following their GenAI policy

Employee age and role are creating unique risks to data security

Risks can vary by employee age and role, with companies more concerned about data security breaches from Generation Z and Millennials falling victim to phishing attacks (61%), oversharing company information online (60%), sending company files/data to personal accounts/devices (62%), and putting sensitive data into GenAI tools (58%).

Respondents also believe senior management (81%) and board members (71%) pose the greatest risk to their company’s data security, likely due to having wide-reaching access to the most sensitive data.

Insider data loss drains time, money, and security teams

Insider-driven data exposure, loss, leak, and theft events can have vast financial repercussions, with cybersecurity leaders estimating that a single event would cost their company $15 million, on average.

The study also found:

  • Respondents spend an average of 3 hours per day investigating insider-driven data events
  • 72% of cybersecurity leaders are worried they could lose their job from an unaddressed insider breach
  • To be effective, companies believe that data protection solutions should offer speed and ease of investigation (42%), visibility into file contents and metadata (39%), and should be able to integrate with other tech solutions (38%)

Featured

  • Meeting Modern Demands

    Door hardware and access control continue to be at the forefront of innovation within the security industry, continuously evolving to meet the dynamic needs of commercial spaces. Read Now

  • Leveraging IoT and Open Platform VMS for a Connected Future

    The evolution of urban environments is being reshaped by the convergence of Internet of Things (IoT) technology and open platform VMS. As cities worldwide grapple with growing populations and increasing operational complexities, these integrated technologies are emerging as powerful tools for creating more livable, efficient, and secure urban spaces. Read Now

  • Securing the Future

    Two security experts sit down with Security Today’s editor in chief Ralph C. Jensen to discuss what they see emerging and changing over the next several years along with how security stakeholders can harness these innovations into opportunities. Read Now

  • Collaboration Made Easy Using a Work Management Platform

    Effective collaboration between security operators, teams and other departments is critical to the smooth functioning of organizations. Yet, as organizations grow in complexity, it becomes more difficult for teams to coordinate with each other. This is compounded by staffing shortages, turnover and ineffective collaboration tools. Read Now

  • Creating a Safer World

    Managing and supporting locks and door hardware within a facility is a big responsibility. A building’s security needs to change over time as occupancy and use demands evolve, which can make it even more challenging. Read Now

Most   Popular

New Products

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame.

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.

  • ComNet CNGE6FX2TX4PoE

    The ComNet cost-efficient CNGE6FX2TX4PoE is a six-port switch that offers four Gbps TX ports that support the IEEE802.3at standard and provide up to 30 watts of PoE to PDs. It also has a dedicated FX/TX combination port as well as a single FX SFP to act as an additional port or an uplink port, giving the user additional options in managing network traffic. The CNGE6FX2TX4PoE is designed for use in unconditioned environments and typically used in perimeter surveillance.