Study: Information Theft At Global Companies Surpasses All Other Forms Of Fraud For First Time

Theft of information and electronic data at global companies has overtaken physical theft for the first time, according to the latest edition of the Kroll Annual Global Fraud Report. This year’s study shows that the amount lost by businesses to fraud rose from $1.4 million to $1.7 million per billion dollars of sales in the past 12 months – an increase of more than 20 percent. The findings are the result of a study commissioned by Kroll with the Economist Intelligence Unit of more than 800 senior executives worldwide.

While physical theft of cash, assets and inventory has been the most widespread fraud by a considerable margin in previous Global Fraud Reports, this year’s findings reveal that theft of information or assets was reported by 27.3 percent of companies over the past 12 months, up from 18 percent in 2009. In contrast, reported incidences of theft of physical assets or stock declined slightly from 28 percent in 2009 to 27.2 percent in 2010.

According to the 2010 survey, 88 percent of companies said they had been the victim of at least one type of fraud during the past year. Of the specific countries analyzed, China is the top market in which companies suffered fraud with 98 percent of businesses operating there affected. Colombia ranked second with a 94 percent incidence of fraud in 2010, followed by Brazil with 90 percent.

Robert Brenner, vice president of Kroll’s Americas region said: “Theft of confidential information is on the rise because data is increasingly portable and perpetrators -- often departing or disgruntled employees -- can remove it with ease absent sufficient controls. At the same time, there is a growing awareness among thieves of the increasing intrinsic value of an organization’s intellectual property. The results of the survey do not suggest other types of fraud are decreasing but merely that the rise in theft of intellectual capital has outstripped other fraudulent activity that has remained constant. Companies need to regularly evaluate how they are controlling access to information within their organization to ensure they are keeping pace with technological advancement and the imperative for collaboration in the workplace.”

Information-based industries reported the highest incidence of theft of information and electronic data over the past 12 months. These include financial services (42 percent in 2010 versus 24 percent in 2009), professional services (40 percent in 2010 versus 27 percent in 2009) and technology, media and telecoms (37 percent in 2010 versus 29 percent in 2009).

The speed of technological developments poses new challenges in the fight against fraud. Nearly one-third (28 percent) of respondents cited information infrastructure complexity as the single most important factor in raising their exposure to fraud. However, despite the increased risks, only 48 percent of companies are planning to spend more on information security in the next 12 months, down from 51 percent last year.

Other key findings include:

  • Fear of fraud dissuades nearly half of companies surveyed from becoming more global: 48 percent of respondents indicated that fraud had dissuaded them from pursuing business opportunities in at least one foreign country. The biggest impact has been on emerging economies, with fraud deterring 11 percent of businesses operating in China and similar percentages of businesses operating in Africa (11 percent) and Latin America (10 percent). Respondents claimed they managed risk in these countries simply by avoiding the regions, even though they may offer attractive investment opportunities.
  • Companies are unprepared for regulation: Increased regulation through the Foreign Corrupt Practices Act (FCPA) and the introduction of the UK’s new Bribery Act has created new challenges for companies. According to the survey, nearly two-thirds (63 percent) of businesses with operations in the U.S. or UK believe the laws do not apply to them or are unsure. As a result, many are unprepared to deal with the regulatory risks: less than one-half (47 percent) are confident that they have the controls in place to prevent bribery at all levels of the operation, compared with 42 percent who say they have assessed the risks and put in place the necessary monitoring and reporting procedures.
  • Fraud is usually an ‘inside job’: For those companies who have been affected by fraud over the past year, junior employees and senior management were the most likely perpetrators at 22 percent each, followed by agents or other intermediaries at 11 percent. The proportion of fraud carried out by these employees ranged from 50 percent to 60 percent in North America, Europe and Asia-Pacific to 71 percent in the Middle East and Africa. The number dropped to 42 percent in Latin America where customers are the primary fraudsters.

Tom Hartley, vice president of Kroll’s Eurasia region, said: “Some of the most concerning findings from the report this year were that challenges faced by corporates investing in unfamiliar territories in search of growth are dissuading them from expansion. This is a combination of opportunity lying where fraud risk is highest and at the same time, the penalties for regulatory failure and likelihood of prosecution increasing. Companies can manage these risks but need to think broadly about the appropriate steps taken to minimize exposure and investigate suspicious actions.”

Featured

  • New Report Reveals Top Trends Transforming Access Controller Technology

    Mercury Security, a provider in access control hardware and open platform solutions, has published its Trends in Access Controllers Report, based on a survey of over 450 security professionals across North America and Europe. The findings highlight the controller’s vital role in a physical access control system (PACS), where the device not only enforces access policies but also connects with readers to verify user credentials—ranging from ID badges to biometrics and mobile identities. With 72% of respondents identifying the controller as a critical or important factor in PACS design, the report underscores how the choice of controller platform has become a strategic decision for today’s security leaders. Read Now

  • Overwhelming Majority of CISOs Anticipate Surge in Cyber Attacks Over the Next Three Years

    An overwhelming 98% of chief information security officers (CISOs) expect a surge in cyber attacks over the next three years as organizations face an increasingly complex and artificial intelligence (AI)-driven digital threat landscape. This is according to new research conducted among 300 CISOs, chief information officers (CIOs), and senior IT professionals by CSC1, the leading provider of enterprise-class domain and domain name system (DNS) security. Read Now

  • ASIS International Introduces New ANSI-Approved Investigations Standard

    • Guard Services
  • Cloud Security Alliance Brings AI-Assisted Auditing to Cloud Computing

    The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment, today introduced an innovative addition to its suite of Security, Trust, Assurance and Risk (STAR) Registry assessments with the launch of Valid-AI-ted, an AI-powered, automated validation system. The new tool provides an automated quality check of assurance information of STAR Level 1 self-assessments using state-of-the-art LLM technology. Read Now

  • Report: Nearly 1 in 5 Healthcare Leaders Say Cyberattacks Have Impacted Patient Care

    Omega Systems, a provider of managed IT and security services, today released new research that reveals the growing impact of cybersecurity challenges on leading healthcare organizations and patient safety. According to the 2025 Healthcare IT Landscape Report, 19% of healthcare leaders say a cyberattack has already disrupted patient care, and more than half (52%) believe a fatal cyber-related incident is inevitable within the next five years. Read Now

New Products

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles.

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.”

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis.