{"id":3568,"date":"2021-09-14T11:14:49","date_gmt":"2021-09-14T15:14:49","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=3568"},"modified":"2021-09-14T15:53:40","modified_gmt":"2021-09-14T19:53:40","slug":"more-expert-commentary-and-coverage-of-the-gethealth-exposure","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/","title":{"rendered":"More Expert Commentary and Coverage of the GetHealth Exposure"},"content":{"rendered":"

\"More<\/p>\n

Experts and cybersecurity professionals continue their analysis of the GetHealth Exposure. Find out what they had to say here.\u00a0<\/i><\/b><\/p>\n

Yesterday, we covered the GetHealth Exposure<\/a>; a platform misconfiguration resulted in 61 million records being exposed from across multiple fitness services and applications. The data exposed includes names, dates of birth, weight, height, gender, and GPS logs, some of which could be considered sensitive.\u00a0<\/span><\/p>\n

Our coverage included expert commentary and coverage, but we\u2019ve received an influx of opinions since. We decided to bundle our favorites here.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n

More Expert Commentary and Coverage of the GetHealth Exposure<\/b><\/h2>\n

Pravin Rasiah<\/b><\/h3>\n

Pravin Rasiah is VP of Product of CloudSphere<\/a>.<\/em><\/p>\n

\u201cCompanies collecting and storing sensitive customer information must be hypervigilant in protecting all of the data they collect. Leaving a database exposed without a password or authentication to prevent unauthorized entry is a surefire way to endanger customer information and potentially damage a brand’s reputation. I<\/span>t is crucial that enterprises<\/span> have the ability to identify<\/span> security flaws in a timely manner so that <\/span>sensitive data such as names, birthdates, and GPS logs<\/span> stay out of the hands of malicious actors. <\/span>A missing password is often the result of a lack of awareness of the constantly changing cloud environment. Without this visibility, it is far too easy for even basic security measures to lapse or be misconfigured. Companies should invest in automation for cloud governance that enforces security guardrails via policies that can prevent or remediate issues in real-time.\u201d<\/span><\/p>\n

Troy Gill<\/b><\/h3>\n

Troy Gill is Senior Manager of Threat Intelligence at Zix | AppRiver<\/a>.<\/em><\/p>\n

\u201cData has become the gold of the digital age, and we owe it to our customers and employees to ensure that it\u2019s always protected. GetHealth\u2019s exposure of potentially sensitive data left millions vulnerable, and although they responded quickly after the exposure was detected, it\u2019s hard to tell who may have accessed the information while it was available.\u00a0<\/span><\/p>\n

It was found that the database hadn\u2019t been password-protected, which may not have been enough to stop a hacker itself in the first place. In addition to guarding information with passwords, organizations must follow a few best practices to keep information secured, such as regularly updating passwords, ensuring that passwords are not recycled among services, and adding an extra layer of security by adopting two-factor authentication.\u00a0<\/span><\/p>\n

To avoid simple errors that could lead to attacks and data theft, organizations should also make it a habit to deploy regular security audits to identify vulnerabilities and other suspicious behavior, allowing them to ensure sensitive data is routinely being backed up.”<\/span><\/p>\n

Anurag Kahol<\/b><\/h3>\n

Anurag Kahol is CTO and Cofounder of Bitglass<\/a>.<\/em><\/p>\n

“Gartner predicts global security spending will <\/span>reach $150.4 billion<\/span><\/a> by the end of this year, yet organizations are often plagued by easily preventable security mishaps\u2014such as leaving databases exposed without any authentication controls in place. In this case, the database\u2019s lack of authentication caused 61 million records containing personally identifiable information (PII) to be publicly exposed online, putting victims at risk of identity theft or being targeted in phishing schemes.<\/span><\/p>\n

To properly protect valuable data from exposure,<\/span> organizations must obtain full visibility and control over their entire IT ecosystem. As such, they must equip themselves with robust and multi-faceted cybersecurity platforms like secure access service edge (SASE) that provide multi-factor authentication (MFA), cloud security posture management (CSPM), user and entity behavior analytics (UEBA), and data loss prevention (DLP) capabilities. With a unified solution, organizations can defend customer data in real-time.”<\/span><\/p>\n

James Carder<\/b><\/h3>\n

James Carder is Chief Security Officer at LogRhythm<\/a>.<\/em><\/p>\n

\u201cThe exposure of over 60 million records containing user information highlights the importance of <\/span>ensuring the appropriate protections are in place to secure sensitive and invaluable customer information. <\/span>Securing customer data should be a top priority for any company and it\u2019s disappointing to see records containing private information like weight, fitness history and GPS logs left unsecured<\/span>, without the most basic security protections, <\/span>for <\/span>cybercriminals to access freely and easily.<\/span> In <\/span>addition to being used for fraud, this data can be used in other <\/span>attacks, some that could even be physical based on the disclosure of GPS data that could provide an attacker with knowledge of where you live, your travel patterns<\/span> and when <\/span>you <\/span>are home or not home. This information could also be used to extort those that may not want sensitive information like their weight exposed to the world.<\/span><\/p>\n

Unprotected databases left exposed online such as this can be avoided. Because simply having a password for a database isn\u2019t enough to protect information, companies housing sensitive information must step-up their security strategy and invest in solutions that automatically detect malicious behavior and enable network infrastructure to proactively thwart unauthorized access attempts. Companies should ensure they have the appropriate protections for the type and classification of the data they house and are expected to protect. To have a database that is internet accessible from anywhere without even a password to protect against unauthorized access to the data is just a failure in the most basic security controls.\u201d<\/span><\/p>\n

Josh Rickard<\/b><\/h3>\n

Josh Rickard is Security Solutions Architect at Swimlane<\/a>.<\/em><\/p>\n

“Platform misconfigurations, like those in the GetHealth database, can have long-standing and upsetting repercussions, even after exposed records have been restricted from public access. In this case, 61 million records containing personally identifiable information (PII)–such as names, birthdates, gender and personal health information–have been exposed to the public and violated victims\u2019 privacy.<\/span><\/p>\n

Although data exposures such as the GetHealth exposure are becoming increasingly frequent, organizations can prevent similar situations and protect valuable human data by centralizing and automating their current security threat detection, response and investigation processes into a single platform. The implementation of a SOAR solution allows for real-time security automation to respond to incidents and execute the appropriate security-related tasks. With comprehensive security automation, the chance for human error is eliminated and customers remain protected.”<\/span><\/p>\n

Thanks to these experts for their time and expertise on the GetHealth Exposure. For more on preventing these kinds of exposures, check out the SIEM Buyer\u2019s Guide<\/a><\/strong><\/span>.\u00a0<\/span><\/i><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Experts and cybersecurity professionals continue their analysis of the GetHealth Exposure. Find out what they had to say here.\u00a0 Yesterday, we covered the GetHealth Exposure; a platform misconfiguration resulted in 61 million records being exposed from across multiple fitness services and applications. The data exposed includes names, dates of birth, weight, height, gender, and GPS […]<\/p>\n","protected":false},"author":41,"featured_media":2895,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[1651,881,1435,95,338,145,1639,1649,112,86,36,21,57,22,1197],"acf":[],"yoast_head":"\nMore Expert Commentary and Coverage of the GetHealth Exposure<\/title>\n<meta name=\"description\" content=\"Experts and cybersecurity professionals continue their analysis of the GetHealth Exposure. Find out what they had to say here.\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"More Expert Commentary and Coverage of the GetHealth Exposure\" \/>\n<meta property=\"og:description\" content=\"Experts and cybersecurity professionals continue their analysis of the GetHealth Exposure. Find out what they had to say here.\u00a0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-14T15:14:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-09-14T19:53:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/01\/SOAR-Automation.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"480\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/\",\"name\":\"More Expert Commentary and Coverage of the GetHealth Exposure\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/01\/SOAR-Automation.jpg\",\"datePublished\":\"2021-09-14T15:14:49+00:00\",\"dateModified\":\"2021-09-14T19:53:40+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Experts and cybersecurity professionals continue their analysis of the GetHealth Exposure. Find out what they had to say here.\u00a0\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/01\/SOAR-Automation.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/01\/SOAR-Automation.jpg\",\"width\":800,\"height\":480,\"caption\":\"More Expert Commentary and Coverage of the GetHealth Exposure\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"More Expert Commentary and Coverage of the GetHealth Exposure\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"More Expert Commentary and Coverage of the GetHealth Exposure","description":"Experts and cybersecurity professionals continue their analysis of the GetHealth Exposure. Find out what they had to say here.\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/","og_locale":"en_US","og_type":"article","og_title":"More Expert Commentary and Coverage of the GetHealth Exposure","og_description":"Experts and cybersecurity professionals continue their analysis of the GetHealth Exposure. Find out what they had to say here.\u00a0","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2021-09-14T15:14:49+00:00","article_modified_time":"2021-09-14T19:53:40+00:00","og_image":[{"width":800,"height":480,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/01\/SOAR-Automation.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/","name":"More Expert Commentary and Coverage of the GetHealth Exposure","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/01\/SOAR-Automation.jpg","datePublished":"2021-09-14T15:14:49+00:00","dateModified":"2021-09-14T19:53:40+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Experts and cybersecurity professionals continue their analysis of the GetHealth Exposure. Find out what they had to say here.\u00a0","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/01\/SOAR-Automation.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/01\/SOAR-Automation.jpg","width":800,"height":480,"caption":"More Expert Commentary and Coverage of the GetHealth Exposure"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/more-expert-commentary-and-coverage-of-the-gethealth-exposure\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"More Expert Commentary and Coverage of the GetHealth Exposure"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3568"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=3568"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3568\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/2895"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=3568"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=3568"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=3568"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}