Visit PrivacyRights.org to see the types of publicly available information about data breaches. How might researchers use this information to study breaches?
The information available on privacyrights.org regarding data breaches primarily focuses on the preparation for, privacy of, and protection of data from data breaches, built off of information about the effects of data breaches themselves. One article I read outlines some of the consequences of data breaches on a company or organization, that I believe would be similar (depending on the size of the company and scale of the attack) to the consequences of data breaches of all companies/organizations. The first consequence mentioned is cost, as cost scales with the size of the attack (number of records compromised) in most cases; cost of a data breach was measured in terms of cost per record. Next, reputational issues were mentioned; if a data breach is successfully committed on a company/organization, there’s a pretty good chance that it will have negative effects on their reputation. Unfortunately, it is unavoidable. Lastly, the initial steps that should be taken in preparation and for protection from these attacks are outlined. My takeaway from this is that researchers can use the information from this website to perhaps shift or intensify their focus on certain assets of that may be targeted in these cyberattacks/data breaches, prioritize what may be more detrimental to the company/organization of the potential consequences if prevention of the data breach failed, and then maybe implement more effective or secure versions of the precautions mentioned earlier to accommodate.
Data Breach Readiness and Follow-up: Being Prepared for the Inevitable: Presentation to the Association of Information Technology Professionals | PrivacyRights.org. (n.d.). Privacyrights.org. https://privacyrights.org/resources/data-breach-readiness-and-follow-being-prepared-inevitable-presentation-association