Security Expert responds to HBO hack

Reports have emerged that entertainment company HBO has suffered a breach and upcoming episodes of the popular show – Game of Thrones have been leaked online:

Terry Ray, chief technology officer at Imperva:

“Another large entertainment provider has had data stolen and it’s the attackers that are bringing it to light.  While we don’t know the specifics yet, it is common that companies become aware of a breach only once the data has been shared beyond the attacker, this was further highlighted in a Verizon Data Breach Report a few years back.  However, there are also cases, like one at a defense contractor, also a couple of years ago, where the victim knew the data was being stolen but had to let it go while they determined that no further hidden holes existed, before shutting of the data leak in an effort to prevent a rush volume of additional data loss.  They too lost over a terabyte of data.

“In this new case, the attackers claim to have 1.5 terabytes of data from HBO – and we don’t know how long they have been accessing the HBO system or what additional data –  financial, email, employee info – the attackers may have in addition to the episodes and scripts.   Since most organizations will get hacked at one point or another, organizations should ask themselves what is their sensitive data, where is their sensitive data and try to invest in protecting it. Businesses can invest in solutions that help them pinpoint critical anomalies that indicate misuse of enterprise data stored in databases and file servers, and that also helps them to quickly quarantine risky users to prevent and contain data breaches proactively.”