Most businesses would prefer to bury the costs associated with their response to a data security event. Sometimes the financial impact resulting from a data breach gets buried in the aftermath of the event since most businesses don’t do a great job of measuring the impact in the first place. But sometimes those costs end up in their financial statements. What you can glean from those is very telling, and is also a warning to businesses about the importance of taking security seriously.
In the wake of last Spring’s numerous ransomware attacks, many businesses found themselves in the uncomfortable position of having to tell their investors that they took a hit. Maersk was one; Nuance was another.