9 ways your Employees' work credentials can lead to a breach

​​With the lines of work-life balance continuing to ever-increasingly blur, we are more inclined to use our business email addresses to sign up to those FREE applications, fitness subscriptions or even online shopping sites.

Did you know, when you or your employees use their work email on websites like the ones on the attached list, it makes your business vulnerable to a breach? 

​An example of this that you may be experiencing today is an increase in Phishing emails, (you know the ones that are pretending to be staff members requesting to transfer funds from bank accounts).

Over the past 23 years in the industry, I have seen in the last few years a significant increase in reports from clients of phishing emails, which can indicate, that someone, somewhere has your business details.

I have had customers reporting multiple examples where breaches have occurred through Phishing emails and inadequate protection that have cost the company up to $500k. I have even heard of reports of a staff member personally losing $10k from their savings account. 

The real question is what ongoing access do the hackers now have? 

Here’s a great video to watch by Cisco if you are interested in how a Cyber Attack happens.

So what's the Solution?

1. Consider protecting individual devices, including mobiles.
   1. With more and more staff now working out of the office, you no longer have one point to protect, which was usually the office Firewall. You currently have to cover all of the devices that have access to corporate information, including laptops, mobiles and tablets. Most people think of EndPoint Protection like Antivirus and Malware protection, but did you know that these only usually protect email. What happens when you browse the internet and accidentally click on that dodgy 30% off deal? I would recommend considering a DNS protection service like Cisco Umbrella.
2. Staff awareness
   1. You may be cyber aware, but are your staff? Did you know that it only takes one staff member to answer a phone call from someone pretending to be from Microsoft to remote share into their computer to access your data? I've seen this happen before! We can perform White Hat or Ethical phishing campaigns to test how cyber aware your staff actually are and also provide awareness training no matter where your staff members are currently located.
3. Checking for current breaches
   1. Have you already been breached? If you have no idea, we can perform a DarkWeb scan and provide you with a detailed report which outlines which emails, what passwords and what Personal details are currently available for purchase on the DarkWeb. We can then proactively monitor all of your Domains and alert you if any details moving forward appear on 3rd party websites.

If you have any questions, want to know if you have been breached or dont know where to start, contact us today for your free consultation!!

Contact Us