{"id":3330,"date":"2021-04-20T15:17:20","date_gmt":"2021-04-20T19:17:20","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=3330"},"modified":"2021-05-12T11:14:36","modified_gmt":"2021-05-12T15:14:36","slug":"expert-commentary-on-the-geico-data-breach-disclosure","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/","title":{"rendered":"Expert Commentary on the Geico Data Breach Disclosure"},"content":{"rendered":"

\"Expert<\/p>\n

Insurance company Geico recently filed a data breach notice with the attorney general of California. According to the disclosure, the breach occurred between January 21, 2021 and March 1, 2021 and exposed customers\u2019 driver license numbers.\u00a0<\/strong><\/em><\/p>\n

However, Geico did not disclose how many customers might have been affected nor whether the breach was limited to California. Driver license numbers can be used to file fraudulent unemployment claims.\u00a0<\/span><\/p>\n

The Geico Data Breach notice reads in part \u201cWe recently determined that between January 21, 2021 and March 1, 2021, fraudsters used information about you \u2013 which they acquired elsewhere \u2013 to obtain unauthorized access to your driver\u2019s license number through the online sales system on our website.\u201d<\/span><\/p>\n

We consulted with cybersecurity<\/a><\/strong><\/span> experts to learn more.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n

Expert Commentary on the Geico Data Breach Disclosure<\/b><\/h2>\n

Rajiv Pimplaskar<\/b><\/h3>\n

Rajiv Pimplaskar is Vice President of <\/span><\/i>Veridium<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n

\u201cThe customer data theft from Geico is a stark reminder of security bugs and vulnerabilities with typical websites.\u00a0 According to Verizon\u2019s Data Breach Investigations Report, approximately 81% of data breaches occur due to poor passwords or compromised credentials.\u00a0 Traditional Two-factor Authentication (2FA) is also vulnerable to “man-in-the-middle\u201d or MITM attacks. Companies can and should embrace passwordless methods like “phone as a token” or FIDO2 to improve security and reduce dependence on passwords. Also, an added benefit is that such technologies are easier to use which improves the overall user experience.\u201d<\/span><\/p>\n

Brent Johnson<\/b><\/h3>\n

Brent Johnson is CISO at <\/span><\/i>Bluefin<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n

\u201cCompanies need to understand the difference between \u201cdata breach\u201d and \u201cdata theft\u201d which are often used interchangeably in the news. A breach occurs any time a hacker gains unauthorized access to data, whether they steal it or not. Data theft involves a hacker extracting data from an enterprise\u2019s systems, like what\u2019s happened here with Geico. Tactics like two-factor authentication to strengthen password protection and training employees to spot phishing emails are common cybersecurity efforts that aim to prevent data breaches and data theft. However, these efforts only strengthen the digital \u201cwalls\u201d protecting sensitive data. Enterprises need to operate under the assumption that every wall has its gaps. Eventually, a hacker will break through and unless you\u2019ve made your data useless to hackers, a compromise is likely to occur.”\u00a0<\/span><\/p>\n

Jon Clemenson<\/b><\/h3>\n

Jon Clemenson is Director, Information Security at <\/span>TokenEx<\/span><\/a>.<\/span><\/em><\/p>\n

“If a business is collecting sensitive data from its customers, as in Geico’s case a driver’s license with names and birthdates etc., they are obligated to protect it. Any intrusion into Geico’s systems will put its customers at risk. We recommend businesses implement a proactive and data-centric security approach to guard against exfiltration events like this for their customers. Maintaining a sound security posture includes integrating tools throughout the technology stack – businesses must consider solutions like tokenization, which anonymize sensitive data to reduce risk and simplify compliance. While Geico works to determine exactly what led to this breach, we look at this news as a reminder to all businesses that it’s simply not enough to protect credit card or transaction data. To safeguard your customers from identity theft or fraud, you must protect all sensitive data that you have collected.”<\/span><\/p>\n

Saryu Nayyar<\/b><\/h3>\n

Saryu Nayyar (she\/her) is CEO of Gurucul<\/a>.<\/span><\/em><\/p>\n

\u201cThis is infuriating. Geico is essentially skirting blame for this breach, and worse – making the victims take responsibility for protecting their driver’s license number from being used to fraudulently apply for unemployment benefits. In the notice of breach letter, Geico states, “fraudsters used information about you \u2013 which they acquired elsewhere…” What information exactly and from where? Geico either doesn’t know or won’t say. In response, they are offering 1 year of free identity-theft protection, but that doesn’t address the unemployment benefits fraud that they admit is the imminent threat. Geico customers must monitor state unemployment communications and contact the agency if they experience a problem. Do you know how hard it is to contact any US state unemployment agency during a pandemic? It’s a nightmare and overwhelmingly time-consuming. There are better ways to protect customers from fraud. Security analytics can detect and stop fraudsters before they drive off with your PII.\u201d<\/span><\/p>\n

<\/div><\/p>\n

Thanks to these experts for their time and expertise. Learn more in the SIEM Buyer\u2019s Guide<\/a><\/strong><\/span>.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Insurance company Geico recently filed a data breach notice with the attorney general of California. According to the disclosure, the breach occurred between January 21, 2021 and March 1, 2021 and exposed customers\u2019 driver license numbers.\u00a0 However, Geico did not disclose how many customers might have been affected nor whether the breach was limited to […]<\/p>\n","protected":false},"author":41,"featured_media":2994,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[353,1561,95,338,145,1563,827,112,21,57,22,1562,1560],"acf":[],"yoast_head":"\nExpert Commentary on the Geico Data Breach Disclosure<\/title>\n<meta name=\"description\" content=\"Insurance company Geico recently filed a data breach notice with the attorney general of California. We consulted with experts to learn more.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Expert Commentary on the Geico Data Breach Disclosure\" \/>\n<meta property=\"og:description\" content=\"Insurance company Geico recently filed a data breach notice with the attorney general of California. We consulted with experts to learn more.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2021-04-20T19:17:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-05-12T15:14:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/\",\"name\":\"Expert Commentary on the Geico Data Breach Disclosure\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg\",\"datePublished\":\"2021-04-20T19:17:20+00:00\",\"dateModified\":\"2021-05-12T15:14:36+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Insurance company Geico recently filed a data breach notice with the attorney general of California. We consulted with experts to learn more.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"GetHealth Platform Misconfiguration Exposes 61 Million Fitness-Tracking Records\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Expert Commentary on the Geico Data Breach Disclosure\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Expert Commentary on the Geico Data Breach Disclosure","description":"Insurance company Geico recently filed a data breach notice with the attorney general of California. We consulted with experts to learn more.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/","og_locale":"en_US","og_type":"article","og_title":"Expert Commentary on the Geico Data Breach Disclosure","og_description":"Insurance company Geico recently filed a data breach notice with the attorney general of California. We consulted with experts to learn more.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2021-04-20T19:17:20+00:00","article_modified_time":"2021-05-12T15:14:36+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/","name":"Expert Commentary on the Geico Data Breach Disclosure","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg","datePublished":"2021-04-20T19:17:20+00:00","dateModified":"2021-05-12T15:14:36+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Insurance company Geico recently filed a data breach notice with the attorney general of California. We consulted with experts to learn more.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/04\/ransomware-4-mod.jpg","width":800,"height":400,"caption":"GetHealth Platform Misconfiguration Exposes 61 Million Fitness-Tracking Records"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/expert-commentary-on-the-geico-data-breach-disclosure\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Expert Commentary on the Geico Data Breach Disclosure"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3330"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=3330"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3330\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/2994"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=3330"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=3330"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=3330"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}