When Data Is Lost, Who Protects It? The Rising Threat of Financial Fraud
Data breaches have become an almost routine headline in recent years. But behind the news, a critical question remains unanswered: once personal or financial information is stolen, who steps in to protect it? This issue of data breach protection is more urgent than ever, as the link between leaked data and surging financial fraud becomes undeniable.
According to a PwC report on UK data breaches, 2015 saw not only a rise in incidents but a doubling of both scale and cost. For large businesses, the report concluded, such breaches are now “a near certainty.” This stark reality demands a closer look at who safeguards lost data—and how.
The Growing Cost of Data Breaches
In the short term, data breaches erode consumer confidence and harm business revenue. However, the financial consequences extend far beyond lost sales. Companies that lose customer data may violate the Data Protection Act (1998), exposing themselves to prosecution. As a result, Lloyds of London has reported a sharp rise in data breach liability insurance policies. This trend underscores a key point: data breach protection is not just a technical issue but a legal and financial imperative.
Where Does Stolen Data End Up?
One often overlooked aspect is the fate of leaked information. For example, what happened to the 600,000 personal and financial records lost by JD Wetherspoons? Who is using the bank details stolen from major UK banks? The answer is simple: criminals. Whether the original hackers or those who buy the data on dark web markets, stolen data fuels a thriving illegal economy.
This means that data breach protection must involve tracking and mitigating the downstream use of compromised data. Without this, businesses and consumers remain vulnerable to identity theft and fraud.
The Role of Financial Fraud Action UK
Financial Fraud Action UK (FFA UK), the financial industry’s anti-fraud group, works with a dedicated police force to combat fraud. In March 2016, it reported that financial fraud losses across payment cards, remote banking, and cheques totaled £755 million in 2015—a 26% increase from 2014. The experts at FFA UK attributed this rise to “impersonation and deception scams, as well as sophisticated online attacks such as malware and data breaches.”
Building on this, the report explicitly linked data breaches to financial fraud for the first time. The rise in card-not-present (CNP) fraud, in particular, is driven by illegally obtained data from breaches. This connection highlights the critical need for robust data breach protection measures.
Personal Data: A Hidden Goldmine for Fraudsters
Financial data is not the only target. According to Action Fraud UK, the national fraud reporting center, fraudsters need only a name, date of birth, and address to open bank accounts or access credit. With this information, they can take over existing accounts and cards. When such data comes from a breach, criminals can act immediately.
Therefore, data breaches should serve as a four-minute warning for businesses. Once a breach occurs, hundreds of thousands of records fall into criminal hands, and fraud follows soon after. Businesses are legally required to notify affected individuals, but they must also prepare for the inevitable spike in fraud.
What Businesses Must Do Now
Merchants and organizations must treat data breaches as early warning signals. Investing in anti-fraud software or tightening security protocols is no longer optional. Whether through advanced encryption, multi-factor authentication, or employee training, data breach protection requires proactive steps.
For more insights on securing your business, read our guide on cybersecurity best practices. Additionally, learn how to prevent fraud in the digital age. Finally, explore data privacy compliance tips to stay ahead of regulations.
In conclusion, the evidence is clear: data breaches lead to fraud spikes. Companies that ignore this risk face not only financial losses but legal liability. The question of who protects lost data ultimately falls on every organization that handles sensitive information. By prioritizing data breach protection, businesses can safeguard their customers, their reputation, and their bottom line.
