Human Error is Still Leading Cause of Cloud Data Breaches

According to the 2023 Thales Global Cloud Security Study, of the 39% of businesses that experienced a data breach in their cloud environment in 2022, the leading cause of these breaches was human error, at 55%, significantly above the next highest factor which was vulnerabilities exploitation, 21%.

Also measured is a 41% rise in SaaS usage from 2021 to 2023. With these applications usually replacing on-premises application functionality, 55% of cyber professionals say this increase has made it more complex to secure data in the cloud. Meanwhile, the risk is compounded with 75% of respondents saying that more than 40% of data stored in their organizations’ cloud was ‘sensitive.’

The targeting of users to infiltrate cloud networks is a trend being observed by other cybersecurity companies as we shared in Proofpoint’s June report The Human Factor 2023. Matt Cooke, Cybersecurity Strategist at Proofpoint told Infosecurity: 

  • “Attackers realize that people and their accounts are still the vulnerability. And it actually doesn’t matter now where that person is because everyone’s pretty much using the same tools. For example, everyone’s got a Microsoft 365 account.”

George McGregor, VP, Approov had this to say:

“A key recommendation of the report is to take steps to manage keys. As cloud services and APIs proliferate so do the keys and credentials used to access them. In particular, keys exposed in mobile app code can provide a path to cloud services for hackers, and central key management should be used to ensure keys are not exposed in code.”

Since we all work in the cloud for a variety of reasons, it makes sense that everything that be done to make the cloud a safe place to work and store data in. Which means that everyone needs to do everything possible to remove the human element from the cloud security equation.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading