02/19/2019
Cyber breaches transpire every day across the globe. Cyber breaches impact government agencies, private industry, schools, communities, and individuals. Millions of customers have had their personal information stolen or leaked, including passwords, financial data, email and home addresses, and health records.
Federal, state and local government computer networks are targeted everyday by malicious actors, cyber criminals, nation states, and intelligence agents. While some cyber defenses are state-of-the-art, compromises still occur.
As a user, you must do your part to learn best practices to ensure your personal identifiable and other sensitive information is secure.
What is the impact of cyber breaches?
• Loss of sensitive, personal, or financial data
• Compromised credentials or email accounts
• Installation of Malware
• Identity theft
• Network or internet outages
What is malware?
Malware is any software or program designed to disrupt the normal operation of a computer and/or network by allowing an unauthorized process to occur or an unauthorized person to gain access.
Malware can be delivered in many forms; via software programs, applications (computer and mobile device), removable media (for example, thumb drives), social media sites, Internet search engines, email (phishing and spear phishing), online advertisements, and fake anti-virus. Malware types include viruses, worms, Trojan horses, adware, spyware, rootkits and botnets.
Mobile devices are also susceptible to malware (for example, through unsecure Wi-Fi, malicious apps and websites). Malware can compromise the device’s mobile applications or underlying operating system. A hacker could remotely turn on the audio/video capabilities of a compromised device to eavesdrop.
Identity theft is a crime in which someone wrongfully obtains and uses another person's personal data in a way that involves fraud or deception. Identity theft becomes possible when an attacker acquires data about the victim through information gathering techniques.
You must take security measures to prevent costly breaches of your computer and mobile devices. You must ensure the integrity, availability and confidentiality of your information on your computer and mobile devices by protecting yourself against risk posed by a cyber threat.
•Integrity: Protection against unauthorized modification or destruction of information.
•Availability: Timely, reliable access to data and information services for authorized users.
•Confidentiality: Assurance that information is not disclosed to unauthorized individuals, processes, or devices.
You should protect your personally identifiable information (PII) at all times. Your PII should be regarded as confidential. What is PII? PII can include the following;
• Full name
• Social Security number
• Home address
• Home or cell phone numbers
• Personal email addresses
• Biometrics (for example, fingerprints, handprints)
• Medical or disability records or history
• Criminal record (for example, police incident reports, arrest,
conviction, sentences)
• Personal financial statements
• Educational details (for example, transcripts)
• Demographic and/or socioeconomic details
• Visual representations (for example, photograph or equivalent
image)
• Marital status
• Racial or ethnic origin
• Religious origin, preference, or affiliation
• Mother’s maiden name
• Place and/or date of birth
• Citizenship or national origin
• Gender
• Zip code
It is important to monitor your credit at least annually to spot possible identity theft, as well as to correct any inaccuracies.
It’s also important to change your passwords and/or PINs on your on your computer and devices as often as possible, including your router. Remember, do not use the same passwords or PINs.
Please, be suspicious of unknown emails and email attachments. If you do not know the sender of an email or email with an attachment or text message, you should avoid opening the content.
If you become a victim of identity theft, or even suspect that you might be a victim, take immediate action. Contact one of the credit reporting agencies' fraud alert departments and place a fraud alert on your credit report, and sign up for a credit monitoring service, if offered.
This prevents identity thieves from opening accounts in your name. Retrieve other accounts, and review old statements for other charges you don't recognize. Don't forget to review inactive or infrequently accounts as well.
You may contact and file a report with the Federal Trade Commission, and your local law enforcement agency. Identity theft victims should contact and converse with their financial institutions to determine how best to avoid further damage.
