{"id":2191,"date":"2018-09-27T14:51:11","date_gmt":"2018-09-27T18:51:11","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=2191"},"modified":"2018-10-05T12:13:07","modified_gmt":"2018-10-05T16:13:07","slug":"uber-settlement-can-teach-us-cybersecurity-coverups","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/","title":{"rendered":"What the Uber Settlement Can Teach Us About Cybersecurity Coverups"},"content":{"rendered":"

\"What<\/p>\n

Yesterday, riding-sharing giant Uber agreed to pay $148 million to settle cases across the U.S. concerning their 2016 data breach. The breach affected 57 million customers and 600,000 drivers. Email addresses and mobile phone numbers were exposed. Yet size is not what made the Uber breach and this subsequent settlement so attention-grabbing. Instead, the Uber breach stands as one of the most infamous cybersecurity coverups of the modern digital age. \u00a0\u00a0\u00a0<\/span><\/p>\n

\t\t\t

<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Travis Kalanick, CEO of Uber at the time of the breach, and his senior leadership chose to pay the hackers responsible $100,000 to keep the incident quiet and destroy the stolen data. Not until a new CEO took the helm of the company did Uber reveal the breach. The disclosure provoked a national scandal and a deluge of lawsuits. <\/span><\/p>\n

In a statement on the recent settlement, Xavier Becerra, Califonia\u2019s Attorney General, summarizes the incident succinctly: \u201cUber\u2019s decision to cover up this breach was a blatant violation of the public\u2019s trust. Consistent with its corporate culture at the time, Uber swept the breach under the rug in deliberate disregard of the law…This settlement broadcasts to all of them that we will hold them accountable to protect that data.\u201d<\/span><\/p>\n

But what can enterprises learn from this sordid story? How will Uber\u2019s settlement change the culture of cybersecurity coverups? And if the culture does change, by how much? <\/span><\/p>\n

The Culture of Cybersecurity Coverups Must End<\/b><\/h3>\n

Data breaches appear to be a part of daily life in the digital marketplace. However, quantifying the number of data breaches experienced each year has proven a challenge for security professionals. <\/span><\/p>\n

Instead of reporting a data breach, many businesses choose to follow the Uber strategy: conceal evidence of the breach and pay off the hackers. Often, these cybersecurity coverups stem from fears of dealing with the financial fallout of a breach. On average, a data breach can cost nearly $4 million. SMBs on average face fees, penalties, and remediation costs of around $2.5 million. These costs don\u2019t even cover the potential costs of discovered compliance failures often exposed in post-breach investigations. \u00a0<\/span><\/p>\n

Therefore, even with new laws like GDPR mandating higher penalties for cybersecurity coverups, enterprises are still making cost-benefit analyses on whether to disclose a breach. The Uber settlement shows those businesses the long-term costs of a cover-up; if discovered (increasingly more likely as more digital connections are forged), the price will significantly outweigh the short-term savings. Instead, fortifying their network with threat detection and having a strong incident response plan will actually save them more in the long-term…and may even deter hackers in the future. \u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n

The Penalties for Cybersecurity Coverups Will Only Get Worse<\/b><\/h3>\n

The Californian Consumer Privacy Act of 2018 is a herald of times to come. More serious and far-reaching cybersecurity and data privacy laws are coming to the U.S, just like GDPR came to the EU. Every cybersecurity expert knows it will happen eventually. The question is when not if. <\/span><\/p>\n

The $148 million Uber paid in its settlement might end up being a slap on the wrist compared to what U.S. enterprises will face in the future. GDPR already mandates nearly $22 million or 4% of annual global revenue (whichever is higher) for failure to comply with its data breach reporting requirements. Depending on your enterprise\u2019s size, this could be a ruinous cost. <\/span><\/p>\n

Further, blatant cybersecurity coverups are going to foster consumer and client resentment and even worse drops in business as higher expectations of data security become mainstream. The old tactics are dying. This is the time to evolve before something devastating happens. \u00a0\u00a0<\/span><\/p>\n

In the End, the People on Top Suffer<\/b><\/h3>\n

Recently, Kaspersky Lab found 32% of corporate data breaches in North America led to the firing of C-Level leaders. At the large enterprise level, 27% of those C-Level leaders were senior executives and not affiliated with IT departments.<\/span><\/p>\n

This might seem like an argument for cybersecurity coverups, but it is, in fact, the opposite. Even if your enterprise properly deploys and maintains a threat detection or SIEM solution, there is still a chance you could suffer a breach. But what happens then will help your board of directors and shareholders know if you are the right leader for the job. <\/span><\/p>\n

Covering up a data breach indicates an administration marked by failure and cowardice. Having a strong incident response plan and guiding the enterprise through perilous waters shows true leadership and forethought. <\/span><\/p>\n

Between those two options, we know who we\u2019d want in charge. \u00a0\u00a0<\/span><\/p>\n

Other Resources:\u00a0<\/strong><\/p>\n

The 10 Coolest SIEM and Security Analytics CEO Leaders<\/a><\/p>\n

5 Tips for Setting Up a Security Operations Center (SOC)<\/a><\/p>\n

Get Your Employees to Embrace SIEM Best Practices!<\/a><\/p>\n

4 Tips to Make Data Breach Detection Easier For Your Enterprise<\/a><\/p>\n

Enterprises: Don\u2019t Become Complacent in Your Cybersecurity!<\/a><\/p>\n

How to Make Your SIEM Solution Deployment Easier for Your Enterprise<\/a><\/p>\n

Comparing the Top SIEM Vendors \u2014 Solutions Review<\/a><\/p>\n

How UEBA Can Prevent Insider Threats in your Enterprise<\/a><\/p>\n

SIEM vs Security Analytics: What\u2019s the Difference?<\/a><\/p>\n

Should Risk Analytics Bridge the Cybersecurity Talent Gap?<\/a><\/p>\n

What\u2019s Changed? The Gartner 2017 Security Information and Event Management (SIEM) Magic Quadrant<\/a><\/p>\n

The 25 Best Security Analytics and SIEM Platforms for 2018<\/a><\/p>\n

Are C-Level Leaders on the Chopping Block over Cybersecurity?<\/a><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Yesterday, riding-sharing giant Uber agreed to pay $148 million to settle cases across the U.S. concerning their 2016 data breach. The breach affected 57 million customers and 600,000 drivers. Email addresses and mobile phone numbers were exposed. Yet size is not what made the Uber breach and this subsequent settlement so attention-grabbing. Instead, the Uber […]<\/p>\n","protected":false},"author":41,"featured_media":1100,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551],"tags":[95,145,112,86,21,57,22,465],"acf":[],"yoast_head":"\nWhat the Uber Settlement Can Teach Us About Cybersecurity Coverups<\/title>\n<meta name=\"description\" content=\"What can enterprises learn from this sordid story? How will Uber\u2019s settlement change the culture of cybersecurity coverups?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What the Uber Settlement Can Teach Us About Cybersecurity Coverups\" \/>\n<meta property=\"og:description\" content=\"What can enterprises learn from this sordid story? How will Uber\u2019s settlement change the culture of cybersecurity coverups?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2018-09-27T18:51:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-10-05T16:13:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/uber-hack-car-crash.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/\",\"name\":\"What the Uber Settlement Can Teach Us About Cybersecurity Coverups\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/uber-hack-car-crash.jpg\",\"datePublished\":\"2018-09-27T18:51:11+00:00\",\"dateModified\":\"2018-10-05T16:13:07+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"What can enterprises learn from this sordid story? How will Uber\u2019s settlement change the culture of cybersecurity coverups?\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/uber-hack-car-crash.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/uber-hack-car-crash.jpg\",\"width\":800,\"height\":400,\"caption\":\"What the Uber Settlement Can Teach Us About Cybersecurity Coverups\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What the Uber Settlement Can Teach Us About Cybersecurity Coverups\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What the Uber Settlement Can Teach Us About Cybersecurity Coverups","description":"What can enterprises learn from this sordid story? How will Uber\u2019s settlement change the culture of cybersecurity coverups?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/","og_locale":"en_US","og_type":"article","og_title":"What the Uber Settlement Can Teach Us About Cybersecurity Coverups","og_description":"What can enterprises learn from this sordid story? How will Uber\u2019s settlement change the culture of cybersecurity coverups?","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2018-09-27T18:51:11+00:00","article_modified_time":"2018-10-05T16:13:07+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/uber-hack-car-crash.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/","name":"What the Uber Settlement Can Teach Us About Cybersecurity Coverups","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/uber-hack-car-crash.jpg","datePublished":"2018-09-27T18:51:11+00:00","dateModified":"2018-10-05T16:13:07+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"What can enterprises learn from this sordid story? How will Uber\u2019s settlement change the culture of cybersecurity coverups?","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/uber-hack-car-crash.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/11\/uber-hack-car-crash.jpg","width":800,"height":400,"caption":"What the Uber Settlement Can Teach Us About Cybersecurity Coverups"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uber-settlement-can-teach-us-cybersecurity-coverups\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"What the Uber Settlement Can Teach Us About Cybersecurity Coverups"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/2191"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=2191"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/2191\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/1100"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=2191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=2191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=2191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}