Australian Organisations Experiencing Highest Rate of Data Breaches, Reports Rubrik

Australian organisations person reported the highest complaint of information breaches compared with planetary markets successful 2023, according to a caller survey. However, they were little apt than their planetary peers to acquisition a “significant” cyber attack.

Australia’s quicker adoption of technologies, including unreality computing, is portion of the story, according to backup and betterment steadfast Rubrik. The institution has urged Australian organisations to reappraisal their backups to amended cyber resilience.

Approximately 8 successful 10 Australian organisations experienced a cyber incident

The State of Data Security: Measuring Your Data’s Risk report, based connected a survey of 1,600 planetary IT and information leaders arsenic good arsenic telemetry information from 6,100 Rubrik customers, gauged the frequence of cyber incidents related to concern email compromises, information breaches, ransomware attacks, insider incidents and inadvertent information exposure.

The study recovered that the data-breach complaint among Australian companies was 50% higher than the planetary average. Additional findings showed that:

• 82% of Australian organisations had experienced a cyber onslaught of immoderate benignant successful 2023.
• 94% of organisations globally experienced a “significant” cyber attack, though the study did not specify what a “significant” cyber onslaught includes.
• Data breaches were the astir prevalent benignant of onslaught successful Australia, comprising 54% of each incidents, compared to the planetary mean of 38%.
• BEC attacks were recovered to beryllium the 2nd astir communal onslaught method successful Australia, witnessed successful 45% of cyber incidents.
• Throughout 2023, Australian organisations experienced an mean of 28.17 attacks, which Rubrik recovered to beryllium connected par with the planetary mean of 28.12.

Antoine Le Tard, vice president – Asia-Pacific and Japan astatine Rubrik, said the report’s results showed Australia was a favourite people for cyber attackers partially due to the fact that the state “is a mature marketplace and aboriginal adopter of unreality and endeavor information technologies.”

“As such, section organisations person been investing heavy successful perimeter information for the past decade, yet Australia holds the unenviable rubric of starring the satellite successful information breaches,” helium said.

Cloud environments are heavy targeted

Cloud environments were the astir targeted situation successful Australia, though attacks were witnessed crossed assorted infrastructures owed to the wide uptake of hybrid environments successful Australia.

According to the Rubrik report, successful Australia:

• 75% of respondents reported malicious enactment targeting unreality environments.
• SaaS was the 2nd astir targeted environment, with malicious enactment reported by 60% of respondents.
• On-premise infrastructure was the 3rd astir targeted, reported by 46% of organisations.

Globally, Rubrik recovered astir unreality tenants were targeted and 2 retired of 3 were compromised:

• 67% of planetary respondents experienced an onslaught successful a SaaS environment.
• 66% had experienced an onslaught successful a unreality environment.
• 51% experienced an onslaught successful an on-premise environment.

Rubrik’s unreality findings were supported by probe from cyber information institution Proofpoint, which recovered that 94% of unreality tenants were targeted each period past twelvemonth and 62% of targeted unreality tenants were compromised.

Blind spots proliferating successful the cloud, Rubrik warns

Rubrik said the unreality comes with inherent hazard — peculiarly with susceptible delicate information — adjacent though it is simply a almighty concern enabler. The steadfast identified 3 information unsighted spots successful the cloud:

• Object storage: 70% of each information successful a emblematic unreality lawsuit is entity storage, according to Rubrik, which typically is not machine-readable by information appliances.
• Unstructured data: 88% of each information successful entity retention is either substance files oregon semi-structured files, making instrumentality readability much difficult, adjacent if tooling and processes let entity retention visibility.
• Sensitive data: More than 25% of each entity stores incorporate information covered by regulatory oregon ineligible requirements, including protected wellness accusation oregon personally identifiable information.

Australian organisations besides falling unfortunate to ransomware attacks

While information breaches were the astir communal onslaught benignant experienced successful Australia, ransomware accounted for much than a 3rd — oregon 36% — of section cyber incidents, compared with 33% globally.

Rubrik noted that Australian organisations were peculiarly inclined to wage ransoms to cyber criminals. In fact, 97% of enterprises reported paying a ransom to retrieve information oregon halt an attack.

The study besides showed that:

• In 70% of reported Australian ransomware cases, a ransom was paid aft an encryption event, oregon erstwhile criminals encrypted organizational information and demanded a ransom to reconstruct access.
• In 54% of cases, a ransom was paid owed to extortion threats, oregon cases wherever criminals exfiltrated organisational information and threatened to people it if a ransom was not received.

Recorded Future tracked 4,399 publically reported ransomware attacks crossed each industries with its ransomware tracker past twelvemonth — an summation of 70% twelvemonth implicit year. Le Tard said the precocious percent of businesses paying a ransom pursuing an encryption lawsuit suggested galore Australian organisations are placing excessively overmuch religion successful perimeter defences.

“They simply aren’t prepared to retrieve their ain information pursuing a palmy attack,” helium explained.

Rubrik argues for Australia to summation cyber resilience

Rubrik says that the prevalence of attacks should propulsion Australian organisations to powerfully see cyber resilience strategies — focused connected concern continuity and betterment aft cyber attacks — and prevention. According to Rubrik’s report, successful Australia:

• A deficiency of enactment engagement is the astir communal limiting origin aft a cyber onslaught (22%).
• Ineffective backup and betterment solutions were the 2nd astir communal limiting origin (21%).
• A deficiency of organisational information expertise was noted arsenic a origin by 17% of organisations.
• 77% of Australian organisations that experienced a cyber onslaught chose to put successful caller exertion and summation spending aft an onslaught (versus 55% globally).

Le Tard explained that “a broad backup strategy is the champion defence” to ransomware attacks.

“It allows the unfortunate to rapidly retrieve their ain information without having to wage the attackers,” helium said. “But investing present often requires an organisation to judge breaches are inevitable.”