How a data breach happens

Process map by Brian. 14 steps, 1 layer. Tags: tech, security, news.

1. The attacker: Send a convincing phishing email
2. An employee: Click the link and enter a password
3. The attacker: Log in with the stolen credentials
4. The attacker: Is there a second factor?
5. The attacker: Trick the employee into approving it, or find another way in
6. The attacker: Move quietly across the network
7. The attacker: Find and copy the valuable data
8. Security team: Does anything look unusual?
9. Security team: Contain it: cut access, investigate, reset passwords
10. The company: Notify regulators and customers, as the law requires in many places
11. Customers: Change passwords and watch for fraud
12. The company: Lessons: training, multi-factor sign-in, monitoring
13. The attacker: Stay hidden for weeks or months
14. Security team: Eventually noticed, or the data shows up for sale

Read this process as Markdown

$Tech $Security $News All process maps