The Rise of California Cybercrime

PROTECTING CUSTOMERS WITH ADAPTIVE AUTHENTICATION

The StatisticsSince 2012, businesses and government agencies have been required to notify the Attorney General on breaches affecting more than 500 Californians.+ In the past four years:

– 657 Data breaches– Affect 49 million records of Californians– 2012: 131 breaches – 2015: 178 breaches (36% increase)– 2012: 2.6M records at risk – 2015: 24M records at risk (Over a 900% increase)

• 24M records = nearly 3 in 5 Californians were victim of data breach in 2015 alone

+ All parts of economy are affected!– Retailers, Banks, healthcare providers, spas, hotels, restaurants, gov’t agencies,

schools, and more!+ Read for yourself

Cybercrime Storm Clouds Brewing in California From 2012 – 2015:• 36% increase in breaches • 900% increase in records impacted• 657 Data breaches & 49 million records of

Californians

Nearly 3 out of 5 California residents were victims of a data breach last year.

What’s Getting Stolen?

67% of U.S. breach victims in 2014 were also victims of fraud.

Social Security Numbers

Birthdates

Driver License

Data

Payment Card Numbers

Insurance & Income

Data

Emerging Trends = Higher Risk

Internet of ThingsBYODCloud AppsBig Data

IT teams are struggling to keep up with new technologies & sophisticated cybercriminals.

Malware & Hacking: Cybercrime Kings

+ 54% of breaches+ 90% of all records impacted+ ALL breaches impacting more

than 1 million records

Passwords alone can’t keep hackers out.

Why don’t passwords work?• Weak and guessable• Identical across multiple accounts• Not changed often enough• Open the door to portals across the

Internet

#1 California Recommendation:

• Secure Configurations for Hardware and Software on Mobile Devices, Laptops, Workstations, and Servers

• Controlled Use of Administrative Privileges • Maintenance, Monitoring, and Analysis of Audit Logs • Email and Web Browser Protections • Boundary Defense • Data Protection • Controlled Access Based on the Need to Know • Application Software Security

SecureAuth solutions meet almost half the 20 controls

Center for Internet Security’s Critical Security Controls

#2 California Recommendation:

“Organizations should make multi-factor authentication available on consumer-facing online accounts that contain sensitive personal information. This stronger procedure would provide greater protection than just the username-and-password combination for personal accounts such as online shopping accounts, health care websites and patient portals, and web-based email accounts.” - Attorney General Kamala D. Harris

“something you know” + “something you have” + “something you are” (password or PIN) (cellphone or token) (keystroke pattern)

Multi-factor Authentication

SecureAuth IdP stops hackers in their tracks – even when they have valid passwords.

SecureAuth delivers secure, flexible, adaptive two-factor authentication. Organizations can offer a swift and convenient user experience while monitoring user behavior to identify suspicious actors in network - protecting their resources and data.

SecureAuth IdP: Multi-factor Authentication

• Over 20 two-factor authentication methods• SMS• telephony and e-mail OTPs• push notification• OATH tokens• social network IDs• device fingerprints• traditional smartcards and tokens

• Works seamlessly with workflow and user experience• Deploys right into your current infrastructure

SecureAuth IdP: Adaptive Authentication

+ Validates user identity behind the scenes+ Uses device fingerprinting, geo-velocity, geo-

location and geo-fencing or comparing IP addresses

+ Takes security to a higher level without adding friction

SecureAuth IdP: Behavioral Biometrics

+ Measure & record user nuances & microbehaviors

+ Compares those patterns to approve or deny authentication

+ Almost impossible for a hacker to duplicate

Protect your California business with secure access solutions that stop criminals and safeguard your reputation, your data and your customers.

Request a SecureAuth IdP demo today.