{"id":3153,"date":"2020-09-15T11:43:22","date_gmt":"2020-09-15T15:43:22","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=3153"},"modified":"2020-09-15T11:43:22","modified_gmt":"2020-09-15T15:43:22","slug":"the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/","title":{"rendered":"The Staples Data Breach: Why “Low Impact” Breaches Still Cause Serious Damage"},"content":{"rendered":"

\"The<\/p>\n

The Staples Data Breach gives us to discuss the common discourse around \u201clow-impact\u201d security breaches. While sensitive data is of course more dangerous if exposed or stolen, all personally identifiable information (PII) can cause serious damage in the wrong hands.\u00a0<\/span><\/p>\n

Here are the facts. Office retail giant Staples disclosed a data breach compromise some customer\u2019s order information. According to a disclosure from the company, the data appears limited to \u201cnon-sensitive\u201d customer data. This includes names, addresses, email addresses, phone numbers, last four credit card digits, and details about the order. The exact scale of the data breach, and the identity of the hackers, remains unknown at this time.\u00a0<\/span><\/p>\n

On the surface, this appears so minor a breach it barely seems worth mentioning. However, cybersecurity<\/a> experts do not shrug off the Staples Data Breach as just another example of hackers being hackers. Instead, they have used it as an opportunity to discuss why even a minor data breach can devastate businesses and customers alike.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n

The Staples Data Breach: The Experts Respond\u00a0<\/b><\/h2>\n

Laurence <\/b>Pitt<\/b><\/h3>\n

Laurence <\/span><\/i>Pitt is the Technical Security Lead at <\/span><\/i>Juniper Networks<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n

\u00a0\u201cMany people will see this as a relief that \u2018only names, email addresses and phone numbers\u2019 were shared \u2013 their credit cards are safe and their transactions remain a secret.\u00a0 However, this is not the case. These pieces of PII still have value on the black market and can be used in order to gain access to other, and perhaps more sensitive, information. The combination of \u2018email address and telephone number,\u2019 for example, would be a great start for anyone attempting takeover attacks on personal data.\u201d<\/span><\/p>\n

\u201cIt\u2019s about time that we stopped ranking personal data theft on perceived severity. Any breach in which personal data is stolen needs to be treated as highly serious and punishable. Then, maybe people will be more careful about what databases are left around for people to find.\u201d<\/span><\/p>\n

Saryu Nayyar<\/b><\/h3>\n

Saryu Nayyar is CEO at <\/span><\/i>Gurucul<\/span><\/i><\/a>.<\/span><\/i><\/p>\n

\u201cWhile the Staples breach appears to be \u2018low impact\u2019 in that no sensitive customer information was released, even supposedly non-sensitive information can be leveraged by a savvy attacker.\u00a0 Knowing what a person or business has ordered, and when, can be just the hook a threat actor needs to formulate an effective phishing email or another social engineering attack.\u00a0 In this day and age, there is very little information that can’t be leveraged in some way for nefarious purposes.\u201d<\/span><\/p>\n

Chlo\u00e9 Messdaghi\u00a0<\/b><\/h3>\n

Chlo\u00e9 Messdaghi is VP of Strategy at <\/span><\/i>Point3 Security<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n

\u201cFor Staples to say that customer order data is non-sensitive is ridiculous. Any social engineer attacker can use that type of data for a phone phishing campaign like this:\u00a0 \u2018When you bought (name of purchased product) under xxxxxxxxxxxx confirmation number, we seem to have overcharged you. Can you please provide your full details of the credit card on file with the xxxx last four digits, so I can get that refund for you?\u2019\u201d<\/span><\/p>\n

\u201cWe don\u2019t know how the breach happened but we do know that this is the exact kind of data that can be used maliciously.\u201d<\/span><\/p>\n

Final Thoughts<\/b><\/h3>\n

A groundbreaking study from Ping Identity<\/a> found that 81 percent of consumers would stop engaging with a brand online after a data breach. To customers, it doesn\u2019t matter the \u201csensitivity\u201d of the data stolen; instead, it comes down to trust. Keep this in mind before dismissing minor breaches.\u00a0<\/span><\/p>\n

You can learn more in our SIEM Buyer\u2019s Guide<\/a>.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

The Staples Data Breach gives us to discuss the common discourse around \u201clow-impact\u201d security breaches. While sensitive data is of course more dangerous if exposed or stolen, all personally identifiable information (PII) can cause serious damage in the wrong hands.\u00a0 Here are the facts. Office retail giant Staples disclosed a data breach compromise some customer\u2019s […]<\/p>\n","protected":false},"author":41,"featured_media":2468,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,3],"tags":[353,95,338,827,112,86,1408,738,1407,21,57,22,1405,1406],"acf":[],"yoast_head":"\nThe Staples Data Breach: Why "Low Impact" Breaches Matter<\/title>\n<meta name=\"description\" content=\"The Staples Data Breach gives us to discuss the common discourse around \u201clow-impact\u201d security breaches. We spoke with experts on the matter.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Staples Data Breach: Why "Low Impact" Breaches Matter\" \/>\n<meta property=\"og:description\" content=\"The Staples Data Breach gives us to discuss the common discourse around \u201clow-impact\u201d security breaches. We spoke with experts on the matter.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2020-09-15T15:43:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/new-hacker-image-resize-compressed.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/\",\"name\":\"The Staples Data Breach: Why \\\"Low Impact\\\" Breaches Matter\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/new-hacker-image-resize-compressed.jpg\",\"datePublished\":\"2020-09-15T15:43:22+00:00\",\"dateModified\":\"2020-09-15T15:43:22+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"The Staples Data Breach gives us to discuss the common discourse around \u201clow-impact\u201d security breaches. We spoke with experts on the matter.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/new-hacker-image-resize-compressed.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/new-hacker-image-resize-compressed.jpg\",\"width\":800,\"height\":400,\"caption\":\"BitDam Unveils New Phishing Trends in September 2020\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Staples Data Breach: Why “Low Impact” Breaches Still Cause Serious Damage\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Staples Data Breach: Why \"Low Impact\" Breaches Matter","description":"The Staples Data Breach gives us to discuss the common discourse around \u201clow-impact\u201d security breaches. We spoke with experts on the matter.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/","og_locale":"en_US","og_type":"article","og_title":"The Staples Data Breach: Why \"Low Impact\" Breaches Matter","og_description":"The Staples Data Breach gives us to discuss the common discourse around \u201clow-impact\u201d security breaches. We spoke with experts on the matter.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2020-09-15T15:43:22+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/new-hacker-image-resize-compressed.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/","name":"The Staples Data Breach: Why \"Low Impact\" Breaches Matter","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/new-hacker-image-resize-compressed.jpg","datePublished":"2020-09-15T15:43:22+00:00","dateModified":"2020-09-15T15:43:22+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"The Staples Data Breach gives us to discuss the common discourse around \u201clow-impact\u201d security breaches. We spoke with experts on the matter.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/new-hacker-image-resize-compressed.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/new-hacker-image-resize-compressed.jpg","width":800,"height":400,"caption":"BitDam Unveils New Phishing Trends in September 2020"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/the-staples-data-breach-why-low-impact-breaches-still-cause-serious-damage\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"The Staples Data Breach: Why “Low Impact” Breaches Still Cause Serious Damage"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3153"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=3153"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3153\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/2468"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=3153"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=3153"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=3153"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}