Page 18 - Cyber Warnings December 2015

"I have put in place additional safeguards to ensure this situation does not happen again," Kemp
said after the breach became public.

It isn't clear when government officials realized the problem. The CDs went out on Oct. 13, but the
Secretary of State's office might not have known about the illegally-compromised fields until the
class action lawsuit was filed.

Will state spring for credit monitoring?
The dozen CDs containing illegally-disclosed data have been returned to the Secretary of State's
office. While all 12 recipients have assured the government they made no copies of the data nor did
they pass it along, Georgia voters are not happy.

"It's very, very scary," plaintiffs' lawyer Jennifer Jordan told the Journal-Constitution. "My information
was compromised, and I was kind of dumbfounded."

It's commonplace in the aftermath of breaches for the organization responsible to pay for credit
monitoring of its victims, however it isn't clear whether the state of Georgia will pony up in this
case.

The episode shows that organizations must go beyond investing in trained IT personnel and buying
up-to-date technologies. Having visibility of the evolving threat matrix and machine-speed
notification of and response to hacking threats can be defeated by insider threats - even when that
insider may have simply made an honest mistake.

About the Author

Hexis Cyber Solutions is a wholly-owned subsidiary of The KEYW Holding
Corporation (NASDAQ: KEYW), and a provider of advanced cybersecurity
solutions for commercial companies and government agencies.

Anna Wehberg, Sr. Marketing Director, joined Hexis Cyber Solutions in April
2014.

Connect with Hexis online: http://www.hexiscyber.com/

Hexis Blog: http://www.hexiscyber.com/blog

Twitter: @hexis_cyber

LinkedIn: https://www.linkedin.com/company/hexis-cyber-solutions

18 Cyber Warnings E-Magazine – December 2015 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide