Traditional data security mindset needs to evolve

©Michael Heim via 123RF

Almost half (49%) had the same opinion when it came to data breaches where personal information was stolen. The survey was done among 5,750 consumers in Australia, Brazil, France, Germany, Japan, United Kingdom and United States.

The survey findings are revealing as more consumers rush to complete their shopping during the holiday season. Six in ten people surveyed believe that threats to their personal information increases during the festive season and two in ten believe that they are likely to be a victim of a breach during the holiday season.

Only a quarter of all respondents feels that companies take the protection and security of customer data very seriously. More than twice as many respondents feel that the responsibility of protecting and securing customer data falls on the company (69%) versus the customer (31%). Of the employed respondents, only around two-fifths (38%) feel that their employer takes the protection and security of employee data very seriously.

Most likely causes

The survey revealed that 31% of respondents have already been affected by data breach in the past. Around four in ten state the most likely causes for being a victim of a breach are visiting a fraudulent website (42%), phishing attacks (40%) or clicking a fraudulent web link (37%). The emotional impact of data breaches has also created apprehensive feelings towards businesses with nearly one-fifth surveyed (19%) feeling they are likely to be a victim of one within twelve months to three years.

Ninety percent of surveyed consumers feel that there are apps and websites that pose significant risks to the protection and security of their personal information. Fifty-five percent believe that social media sites expose them to the greatest risk, and around two in five respondents believe adult content and torrent apps/websites carry the greatest risk to the security of personal information.

Around a quarter (23%) of respondents who have been a victim of a data breach, either has, or would, consider taking legal action against the breached company involved in exposing their personal information. Almost half (49%) of respondents said they would take or would consider taking legal action against any of the parties involved in exposing their personal information.

However, the consumer is not completely absolved of responsibility. Despite the many risks involved, the survey also found that a majority (54%) of respondents are using the same password for all or some of their online accounts. Of the respondents who actively use social media accounts, only a quarter (25%) use two-factor authentication to secure all of their social media accounts.

Online and mobile banking

Of the respondents who actively use online/mobile banking, around three fifths (58%) say that all of their banks use two-factor authentication to secure their internet banking. This isn't as widespread amongst retailers, however. Of the respondents who actively use online retail accounts, one in four (25%) state that all of the online retail apps/websites they use, require two-factor authentication to secure online transactions.

"The media coverage of massive data breaches has done little to instill consumers' confidence in how well companies, big and small, are protecting their data," said Jason Hart, vice-president and chief technology officer for data protection at Gemalto. "The fact that employees don't even feel that their employers are taking the protection of their personal data security very seriously rings alarm bells. Either companies need to increase their security measures or, assuming that they already have these in place, they need to communicate this to their customers.

"As companies collect ever-increasing amounts of customer data and as our digital interactions become more diverse, more data about what we do, who we are and what we like is being stored online," continued Hart.

"The survey proves that the traditional data security mindset needs to evolve; this goes for companies and consumer adoption of advanced security measures like two-factor authentication. Otherwise, an increasing number of consumers will cut ties with companies who aren't taking data protection seriously, and take their business to someone they can trust."