4 ms·

It's very delicate to talk about financial burden, given the following references: "Two months after damaging data breach, Target stock has its best day in 5 y

It's very delicate to talk about financial burden, given the following references: "Two months after damaging data breach, Target stock has its best day in 5 years" http://blogs.marketwatch.com/behindthestorefront/2014/02/26/two-months-after-damaging-data-breach-target-stock-has-its-best-day-in-5-years/ http://blogs.marketwatch.com/behindthestorefront/2014/02/26/... "Sad reality: It's cheaper to get hacked than build strong IT defenses" http://www.theregister.co.uk/2016/09/23/if_your_company_has_terrible_it_security_that_could_be_a_rational_business_decision/ http://www.theregister.co.uk/2016/09/23/if_your_company_has_... "The Cost of Cyberattacks Is Less than You Might Think" https://www.schneier.com/blog/archives/2016/09/the_cost_of_cyb.html https://www.schneier.com/blog/archives/2016/09/the_cost_of_c... And my take on this topic "Is it really cheaper to get hacked?" https://dadario.com.br/is-it-really-cheaper-to-get-hacked/ https://dadario.com.br/is-it-really-cheaper-to-get-hacked/

user5994461 10y ago
So, the best way to monetize a breach is to play with the company's stock while you disclose the breach. Interesting.
- raesene6 10y ago
  Yeah that's already a thing http://www.zdnet.com/article/cybercriminals-turn-talents-to-stock-market-manipulation/ http://www.zdnet.com/article/cybercriminals-turn-talents-to-... Also monetizing security vulnerabilities by place bets on stock when disclosing has already happened http://www.careersinfosecurity.com/st-jude-medical-files-lawsuit-over-device-security-report-a-9385 http://www.careersinfosecurity.com/st-jude-medical-files-law... . It does carry the risk of a lawsuit however...
gsam 10y ago
In the end, it's really the consumer's fault for not caring. But then again, there's really nowhere to run to anyways. The companies are beginning to cover their asses with cyberinsurance so that they can cover their legal fees and obligations. The only loser is the consumer.

user5994461 10y ago

So, the best way to monetize a breach is to play with the company's stock while you disclose the breach. Interesting.

raesene6 10y ago
Yeah that's already a thing http://www.zdnet.com/article/cybercriminals-turn-talents-to-stock-market-manipulation/ http://www.zdnet.com/article/cybercriminals-turn-talents-to-... Also monetizing security vulnerabilities by place bets on stock when disclosing has already happened http://www.careersinfosecurity.com/st-jude-medical-files-lawsuit-over-device-security-report-a-9385 http://www.careersinfosecurity.com/st-jude-medical-files-law... . It does carry the risk of a lawsuit however...

gsam 10y ago

In the end, it's really the consumer's fault for not caring. But then again, there's really nowhere to run to anyways. The companies are beginning to cover their asses with cyberinsurance so that they can cover their legal fees and obligations. The only loser is the consumer.