{"id":3280,"date":"2021-02-02T13:55:12","date_gmt":"2021-02-02T17:55:12","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=3280"},"modified":"2021-02-02T13:57:10","modified_gmt":"2021-02-02T17:57:10","slug":"expert-commentary-of-the-washington-state-auditor-office-breach","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/","title":{"rendered":"Expert Commentary of the Washington State Auditor Office Breach"},"content":{"rendered":"

\"Expert<\/p>\n

The Washington State Auditor Office disclosed suffering a data breach that exposed the personal information in 1.4 million employment claims.\u00a0<\/span><\/p>\n

According to data breach disclosures, the records became exposed during a December breach of Accellion, a software provider used by the State Auditor Office for the transfer of large computer files. The Washing State Auditor Office only became aware of the breach\u2019s effect on their files on January 25.\u00a0<\/span><\/p>\n

The data contained in the stolen and exposed files include names, social security numbers, driver\u2019s license or state identification numbers, bank account numbers, routing numbers, and more.\u00a0<\/span><\/p>\n

Additionally, the breach exposed files from Washington local governments and other state agencies.\u00a0<\/span><\/p>\n

To understand more about the lessons businesses could learn from this breach, we contacted several cybersecurity<\/a> experts. Here\u2019s what they had to say.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n

Expert Commentary of the Washington State Auditor Office Breach<\/b><\/h2>\n

Andy Oehler<\/b><\/h3>\n

Andy Oehler is VP of Product Management at <\/span><\/i>Zentry Security<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n

“First, it\u2019s critical to maintain an up-to-date environment. Also, just because data is in your own data center does not mean that its security is guaranteed. Maintaining on-prem software requires time and investment, so it\u2019s no surprise that organizations that are understaffed may have older software deployed. In both cases, it\u2019s important to consider the perimeter around these apps. A zero-trust access approach to securing these apps assumes that a threat can come from anywhere. Therefore, it scrutinizes every request to download data to protect its valuable assets and intellectual property.”<\/span><\/p>\n

Christian Espinosa<\/b><\/h3>\n

Christian Espinosa is Managing Director at <\/span><\/i>Cerberus Sentinel<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n

“Cybercriminals typically break in by exploiting vulnerabilities or taking advantage of misconfigurations. In this instance, a vulnerability existed that was overlooked. We all want to trust that our cybersecurity teams are doing the best they can to keep attackers out. I believe in what Reagan once said \u2018trust, but verify.\u2019 It\u2019s much better, and less costly, to have a trusted ally validate your security than wait until it\u2019s validated or invalidated by an attacker.”<\/span><\/p>\n

Purandar Das<\/b><\/h3>\n

Purandar Das is CEO and Co-Founder of <\/span><\/i>Sotero Software<\/span><\/i><\/a>.<\/span><\/i><\/p>\n

\u201cData sharing, by organizations, is one of the key areas of vulnerability. This activity is an area that will be targeted more and more by hackers. Organizations have relied on \u201csecure data transfer\u201d, meaning the data is protected in transmission, as being sufficient. This is no longer true. Even if the data is secure during transmission the underlying data is in cleartext. True and complete data protection has to be built from the ground up. Regardless that the data is being transmitted over a secure channel, data security must start at the source. Meaning the data should be protected (encrypted) all the time, even in use. This is a huge part of protecting data and information.<\/span><\/p>\n

Credit card companies discovered this a long time ago. Hence the reason why credit card information is never transmitted to the retailer. The card companies encrypt it and don\u2019t transmit or share the information. Unfortunately, the same mechanism does not work for everyone. The transmitted data needs to be available for use and analysis. Adopting newer technologies that enable the use of encrypted data by the proper parties coupled with multi-party key ownership for authentication is one way to eliminate data loss during transmission.\u201d<\/span><\/p>\n

Niamh Muldoon<\/b><\/h3>\n

Niamh Muldoon is Global Data Protection Officer at <\/span><\/i>OneLogin<\/span><\/i><\/a>.<\/span><\/i><\/p>\n

“This is a great example of the need for organizations to build a comprehensive Trust and Security program focusing on people, processes, and technology controls to protect data processed and stored, whether it’s within their own organization or with a third party. This breach empathizes the importance of \u2018Security First\u2019 culture within organizations that must stay on top of the latest threats. Security must be seen as a business enabler. The State of Washington appears to be taking the right steps in presenting an incident response process and alerting affected citizens.”<\/span><\/p>\n

Trevor Morgan<\/b><\/h3>\n

Trevor Morgan is Product Manager at <\/span><\/i>comforte AG<\/span><\/i><\/a>.<\/span><\/i><\/p>\n

\u201cThe very disappointing news that the highly sensitive personal data of 1.6 million unemployed filers in Washington State was exposed underscores just how important data-centric security is. Unlike perimeter security methods, which strengthen the boundaries around data, data-centric security such as tokenization protects the data itself, obfuscating it so that it becomes for all intents and purposes unintelligible. This means that if it falls into the wrong hands, threat actors cannot use it or leverage it for their personal gain\u2014the meaning behind the data remains hidden. Had the caretakers of this data implemented data-centric security, then the privacy of over 1.6 million Washington State citizens would have been maintained and protected.\u201d<\/span><\/p>\n

<\/div><\/p>\n

Thanks to these cybersecurity experts for their time and expertise! For more information, check out our SIEM Buyer\u2019s Guide<\/a>.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

The Washington State Auditor Office disclosed suffering a data breach that exposed the personal information in 1.4 million employment claims.\u00a0 According to data breach disclosures, the records became exposed during a December breach of Accellion, a software provider used by the State Auditor Office for the transfer of large computer files. The Washing State Auditor […]<\/p>\n","protected":false},"author":41,"featured_media":3058,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[353,1288,1267,95,145,112,86,1489,21,57,1488,1490,1487],"acf":[],"yoast_head":"\nExpert Commentary of the Washington State Auditor Office Breach<\/title>\n<meta name=\"description\" content=\"The Washington State Auditor Office disclosed suffering a data breach that exposed the personal information in 1.6 million employment claims.\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Expert Commentary of the Washington State Auditor Office Breach\" \/>\n<meta property=\"og:description\" content=\"The Washington State Auditor Office disclosed suffering a data breach that exposed the personal information in 1.6 million employment claims.\u00a0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2021-02-02T17:55:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-02-02T17:57:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/\",\"name\":\"Expert Commentary of the Washington State Auditor Office Breach\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg\",\"datePublished\":\"2021-02-02T17:55:12+00:00\",\"dateModified\":\"2021-02-02T17:57:10+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"The Washington State Auditor Office disclosed suffering a data breach that exposed the personal information in 1.6 million employment claims.\u00a0\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"Panther Labs Releases State of SIEM 2021 Report\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Expert Commentary of the Washington State Auditor Office Breach\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Expert Commentary of the Washington State Auditor Office Breach","description":"The Washington State Auditor Office disclosed suffering a data breach that exposed the personal information in 1.6 million employment claims.\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/","og_locale":"en_US","og_type":"article","og_title":"Expert Commentary of the Washington State Auditor Office Breach","og_description":"The Washington State Auditor Office disclosed suffering a data breach that exposed the personal information in 1.6 million employment claims.\u00a0","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2021-02-02T17:55:12+00:00","article_modified_time":"2021-02-02T17:57:10+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/","name":"Expert Commentary of the Washington State Auditor Office Breach","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg","datePublished":"2021-02-02T17:55:12+00:00","dateModified":"2021-02-02T17:57:10+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"The Washington State Auditor Office disclosed suffering a data breach that exposed the personal information in 1.6 million employment claims.\u00a0","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/06\/Dark-web-mod.jpg","width":800,"height":400,"caption":"Panther Labs Releases State of SIEM 2021 Report"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-of-the-washington-state-auditor-office-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Expert Commentary of the Washington State Auditor Office Breach"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3280"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=3280"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3280\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/3058"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=3280"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=3280"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=3280"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}