Can anyone explain why data breeches appear to increasing and large organizations appear powerless to prevent?
I’ll put money on out of date OS and lack of budget for any kind of upgrades.
I’ve just filtered my incoming bug reports by people still running Windows XP. Almost all of them are pharmacies. You tell them to upgrade, and that they’re not PCI-DSS compliant. For 9 years.
The rest of the NHS is likely even worse.
Sad thing about IT security, it’s one of those things that costs money and you don’t see the benefits. Only the catastrophic failures.
‘Why are we paying all this money out when we could just save the money and never upgrade’ – some manager, somewhere.
I was doing contract work for Barts when this exact same thing happened to them 5 years or so ago with wannacry. If I was in their Information Governance team I’d be demanding a massive investigation into why patient data has been compromised in the exact same way yet again.