Types Of Breaches Research Articles

THE IMPACT OF CYBERSECURITY BREACHES ON BIG BUSINESSES

This paper explores the significant impact of cybersecurity breaches on large businesses, focusing on financial losses, operational disruptions, reputational damage, and legal challenges. It examines key breach types such as data theft, ransomware, and phishing, and highlights the increasing complexity of cyber threats due to emerging technologies like AI, IoT, and 5G. Case studies, including Target and Equifax, demonstrate the long-term consequences of breaches. The paper emphasises the importance of proactive cybersecurity strategies, leadership involvement, and continuous adaptation to evolving threats. In conclusion, it underscores the need for businesses to invest in robust cybersecurity measures to protect assets, maintain consumer trust, and ensure long-term resilience in an increasingly digital world.

ANALISIS YURIDIS WANPRESTASI DALAM KASUS JUAL BELI MATERIAL BESI DAN SENG

The sale and purchase agreement that ended in a lawsuit for breach of contract occurred because one of the parties did not fulfill its obligations. The problem in this paper is the implementation of agreement between PT AS and PT HM reviewed from the applicable provisions and the method of resolving the breach of contract in court. For the finding results and conclusion in this case, PN Tangerang won PT HM, while PT Banten won PT AS. The Supreme Court confirmed the decision of PT Banten. Obtained is that the agreement is valid and binding even though it was not made in writing. In its implementation, PT AS has fulfilled its duty, while PT HM has not fulfilled its duty or is in breach of contract. The type of breach of contract committed by PT HM is carrying out what was promised, but not completed. The action of PT HM in refusing to comply with court decision and submitting a PK using falsified evidence shows that PT HM has violated the principle of good faith and can be charged with a civil lawsuit (PMH) and a criminal lawsuit (fraud / embezzlement / default and falsification of documents).

TYPES OF DAMAGES UNDER THE CISG

The breach of a contract of sale may cause damage. Naturally, the aggrieved party may claim damages as a result of the breach of the contract of sale. Therefore, the Vienna Convention on International Sale of Goods (CISG, 1980) regulates damages in Articles 74 -78 of the CISG. Article 74 provides foreseeability and full compensation principles as general principles for determining damages resulting from all types of breaches. Articles 75 and 76 regulate damages resulting from the fundamental breach caused by the avoidance of a contract of sale. Article 77 puts the injured party under the obligation to mitigate damage. Article 78 regulates the issue of determining interest rates. Although these provisions seem comprehensive at first glance, they do not cover some important issues. Case law, legal doctrine, and gap-filling rules are very important for the interpretation of these provisions. The purpose of this paper is to draw a line in the interpretation of these provisions on damages for breach of contract. The doctrinal research methodology shall be employed in this paper.

The Deterrent Effect of Financial Sanctions Pursuant to Article 260(2) tfeu in the Context of Violations of Environmental Obligations

Abstract The paper aims at understanding whether financial sanctions pursuant to Article 260(2) tfeu have a deterrent effect in relation to specific types of State breaches, namely environmental ones. Spanning three parts, the paper examines how the different type of infringement affects the effectiveness of the payment of financial sanctions, and how these are not equally effective in relation to all types of breaches. Subsequently, it studies the features and issues of the Italian cases. On the bases on this empirical analysis, the article will try to answer the research question. Finally, proposals for amendments will be drawn up, assessing the feasibility of other forms of sanctions.

Investigating multidimensional organisational trust through breach

ABSTRACT Objective The literature shows employee trust in leaders supports organisational performance, despite much still being unknown about the employee-leader trust relationship. This study aimed to explore employee trust in leaders through trust breaches to broaden knowledge about the multidimensional nature of the trust construct and provide organisations with a focus on how to improve employee trust in leaders. Method Trust breaches were explored using hypothetical vignettes. Participants received one scenario with a combination of a relationship treatment and behavioural treatment. There were three relationship treatments: no relationship, new relationship, and established relationship between employee and leader. There were also eight unique behavioural treatments of trust breach between employee and leader in the workplace (for example, betraying agreements). Results Using one-way and two-way analysis of variance, findings showed that only those allocated to the established relationship group were likely to trust the hypothetical leader in the future. While all behavioural breaches negatively influenced future trust, the behaviours of leader lying to, betraying confidentiality of, and publicly belittling the employee were significantly less likely to engender future employee trust. Conclusion This study offers a novel perspective to exploring employee-leader multidimensional organisational trust by investigating trust breaches according to type of relationship and behavioural breach type. This study showed behavioural breaches negatively influence perceptions of future employee trust in leaders. It also reaffirms that established relationships are most likely to be resilient to trust breaches over nominal or absent relationships between employees and their leader.

A cybersecurity risk quantification and classification framework for informed risk mitigation decisions

Data breaches have been causing havoc for many years and continue to rise, demanding a more comprehensive framework to assess their severity. This study proposes a cybersecurity risk quantification and classification framework, addressing a significant research gap in breach severity evaluation. The study has two main objectives: to present a structured model for precise breach severity assessment, and to apply this model to real-world data breaches for practical insights. To achieve these objectives, we utilize a content analysis methodology to gauge severity of data breaches. This is followed by a robust likelihood impact matrix analysis, serving as a decision analytics tool, to effectively quantify potential risks. The integration of these approaches yields a more comprehensive and nuanced evaluation for assessing data breach severity. The proposed framework is then applied to data breaches gathered from Standard & Poor’s (S&P 500) organizations, revealing hacking and loss/theft of portable media as the breach types with the highest impact and probability. Drawing from these insights, our study suggests effective strategies to mitigate data breach risks for organizations. The implications of our research findings offer valuable contributions to both academic research and practical cybersecurity risk management.

Secure Transmission Scheme Based on Joint Radar and Communication in Mobile Vehicular Networks

Vehicle-to-vehicle (V2V) communication applications face significant challenges to security and privacy since all types of possible breaches are common in connected and autonomous vehicles (CAVs) networks. As an inheritance from conventional wireless services, potential eavesdropping is one of the main threats to V2V communications. In our work, the anti-eavesdropping scheme in CAVs networks is developed through the use of cognitive risk control (CRC)-based vehicular joint radar-communication (JRC) system. In particular, the supplement of off-board measurements acquired using V2V links to the perceptual information has presented the potential to enhance the traffic target positioning precision. Then, transmission power control is performed utilizing reinforcement learning, the result of which is determined by a task switcher. Based on the threat evaluation, a multiple armed bandit problem is designed to implement the secret key switching procedure when it is needed. Through constant perception-execution loops (PELs), the security and confidentiality is improved for the authorized vehicles in their behavioral interactions with the illegal eavesdropper. Numerical experiments have presented that the developed approach has anticipated performance in terms of some risk assessment indicators.

Don't blame people – fix the system

It's easy to blame people when security incidents occur. But while many types of breaches do indeed involve a human element, we should stop to ask ourselves why people acted in the ways they did, and why that was allowed to become a problem. Our systems and processes need to be designed with security embedded deeply within them so that minor lapses on the part of staff members are prevented from becoming a problem.

Assessing safety of journalism practice in Ghana: Key stakeholders’ perspectives

This study sought to use the self-reporting method of survey as well as key informant interviews to investigate the depth and spread of the problem. A total of 115 respondents took part in the survey. Additionally, eight interviews were conducted with key stakeholders. The study found that the most common infraction was verbal abuse. Colleagues, police, political fanatics, politicians, security operatives and government officials, were among the top perpetrators of safety violations against journalists. A sizeable portion (albeit fewer) were dissatisfied with their workplace safety provisions and minimal confidence in the concern of their employers for their well-being. About half of respondents indicated their media organisations did not make provisions for safety gear for covering potentially dangerous beats. Many of the respondents thought that the posture, attitude and actions of key state actors, law enforcement agencies as well as their own association (GJA) concerning their safety were unsatisfactory. The study recommends that the government ensures the security and safety of journalists and media organizations. Media organizations must ensure a safe and toxic-free work environment through codes of practice, policies, and enforcement; and journalists become familiar with the various types of safety breaches and corrective measures that can be taken.

Breach of a treaty as a cause for its termination and the ratio with international responsibility

Abstract Treaties as instruments for establishing legal relations between the subjects of international law are acts which can both create a relationship and extinguish it. On the other hand, despite the fact that the parties to a treaty enter into this relationship with the good will that it will last in time and the treaty will be implemented, for various reasons it may happen that the parties are no longer interested in being bound by this treaty. For this reason, the Vienna Convention on the Law of Treaties has provided for ways to terminate the legal force of a treaty. One of these foreseen ways is the breach of the treaty by one of the parties, which must be said, is a way that has found application and is being implemented even today. This paper aims that, relying on a qualitative methodology, based on research in literature and relevant legislation, to analyze the breach of the treaty as a reason for its termination, the types of breaches and the systems proposed by the 1969 Vienna Convention as well as the consequences of breaches of the treaty and a comparative overview with international responsibility. As an expected result of this research, is the conclusion that not every breach of a treaty is a cause for the termination of its legal force and that there are differences between the consequences of the termination of the treaty as a result of a breach by the parties and the reactions to breaches by the point of view of international responsibility.

Cyberthreats: A primer for healthcare professionals

IntroductionCyberattacks are one of the most widespread, damaging, and disruptive forms of action against healthcare entities. Data breaches, ransomware attacks, and other intrusions can lead to significant cost both in monetary and personal harm to those affected and may result in large payouts to cyber criminals, crashes of information technology systems, leaks of protected health and personal information, as well as fines and lawsuits. This study is a descriptive analysis of healthcare-related cyber breaches affecting 500 or more individuals in the past decade in the United States. MethodsThe publicly available U.S. breach report database was downloaded in the Microsoft Excel (Microsoft, Redmond, Washington, USA) format and searched for all reported breaches occurring between January 1, 2011 - December 31, 2021 (10 years). Breaches were subdivided by category and analyzed by states, breach submission dates, types of breach, location of breached information, entity type, and individuals affected. All subcategories were predefined by the breach report. ResultsThere were a total of 3822 PHI breaches that affected 283,335,803 people in the United States from January 1, 2011 to December 31, 2021. Of the 3822 PHI breaches, 1593 (41.7%) were hacking/ IT related, 1055 (27.6%) were listed as unknown, 819 (21.4%) were theft related, 194 (5.1%) were loss related, 97 (2.5%) were related to improper disposal and 64 (1.7%) were listed as “others”. Year 2020 saw the most breaches with 631 and California was the state with the highest number of breaches at 403. ConclusionCyberattacks and healthcare breaches are one of the most costly and disruptive situations facing healthcare today. A total of 3822 breaches affecting 283,335,803 people in the United States were recorded from January 1, 2011 to December 31, 2021. By understanding the extent of cyberthreats this will better prepare healthcare organizations and providers to mitigate, respond, and recover from these devastating attacks.

Analyzing web descriptions of cybersecurity breaches in the healthcare provider sector: A content analytics research method

Though the ever-increasing data breach incidents in healthcare providers are exposing their clients’ personal, financial, and medical data to cybercriminals, there is limited empirical research on the dynamics of data breaches. These dynamics include relationships between data breach types and locations, vulnerabilities, and mitigation efforts. To address the research gap, a four-step content analytics-based research method is developed. Firstly, the types of data breaches that take place at various data breach locations are analysed. Secondly, co-occurring keywords are identified from web descriptions of data breach incidents. Thirdly, multi-level themes related to keywords are derived. Lastly, themes and contextual information are translated into vulnerabilities, impacts, and mitigation efforts. The identified vulnerabilities, impacts, and mitigation efforts of the different breach type/location combinations aim to assist practitioners in the prevention and mitigation of cybersecurity breaches.

Analyzing Health Data Breaches: A Visual Analytics Approach

This research studies the occurrence of data breaches in healthcare provider settings regarding patient data. Using visual analytics and data visualization tools, we study the distribution of healthcare breaches by state. We review the main causes and types of breaches, as well as their impact on both providers and patients. The research shows a range of data breach victims. Network servers are the most popular location for common breaches, such as hacking and information technology (IT) incidents, unauthorized access, theft, loss, and improper disposal. We offer proactive recommendations to prepare for a breach. These include, but are not limited to, regulatory compliance, implementing policies and procedures, and monitoring network servers. Unfortunately, the results indicate that the probability of data breaches will continue to rise.

For-profit versus non-profit cybersecurity posture: breach types and locations in healthcare organisations.

The implementation of emerging technologies has resulted in an increase of data breaches in healthcare organisations, especially during the COVID-19 pandemic. Health information and cybersecurity managers need to understand if, and to what extent, breach types and locations are associated with their organisation's business type. To investigate if breach type and breach location are associated with business type, and if so, investigate how these factors affect information systems and protected health information in for-profit versus non-profit organisations. The quantitative study was performed using chi-square tests for association and post-hoc comparison of column proportions analysis on an archival data set of reported healthcare data breaches from 2020 to 2022. Data from the Department of Health and Human Services website was retrieved and each organisation classified as for-profit or non-profit. For-profit organisations experienced a significantly higher number of breaches due to theft, and non-profit organisations experienced a significantly higher number of breaches due to unauthorised access. Furthermore, the number of breaches that occurred on laptops and paper/films was significantly higher in for-profit organisations. While the threat level of hacking techniques is the same in for-profit and non-profit organisations, certain breach types are more likely to occur within specific breach locations based on the organisation's business type. To protect the privacy and security of medical information, health information and cybersecurity managers need to align with industry-leading frameworks and controls to prevent specific breach types that occur in specific locations within their environments.

Phishing Website Detection Using Ensemble Learning

Phishing is also the most common type of data breach. As a result, it is carried out by sending an email with links that lead to fraudulent websites. This technique is especially targeted to large companies. Usually, the attackers send emails with work-related information. Machine learning is one of the most successful techniques for detecting phishing. This paper analyzed the results of various machine learning techniques for predicting phishing websites. And also describes the various methods that are used to identify phishing websites. Some of these include the SVM classification method, Random Forest method, and AdaBoost method. Ensemble model that combines the SVM, Random Forest, and AdaBoost methods was able to classify a phishing site with an accuracy of 96%

Predictive Taxonomy Analytics (LASSO): Predicting Outcome Types of Cyber Breach

Abstract Cyber breaches are costly for the global economy and extensive efforts have gone into improving the cybersecurity infrastructure. There are numerous types of cyber breaches that vary greatly in terms of cause and impact, resulting in an extensive literature for individual cyber breach type. Our paper seeks to provide a general framework that can be easily applied to analyze different types of cyber breaches. Our framework is inspired by the taxonomy approach in the cybersecurity literature, where it was proposed that an effective set of taxonomy can provide a direction on supporting improved decision-making in cyber risk management and selecting relevant cybersecurity controls. Our paper extends upon the current approach by using this taxonomy to model and predict the associated breach outcomes, given the occurrence of a cyber breach. Specifically, our paper applies least absolute shrinkage and selection operator (LASSO) within a taxonomy framework. Using a proprietary database of known cyber breaches, we show that this analytical tool performs well in out-of-sample predictions and a stable model that generates consistent predictions. For each cyber breach outcome type, we also provide the list of keywords that are useful in predicting the outcome type. We envision researchers, insurers, underwriters, and cybersecurity professionals can use (or expand on) our list of keywords, or use our method to yield their own set of keywords. Practitioners who seek to mitigate their cyber risk may use these keywords as a guide towards the specific attack surfaces that might be most susceptible to the corresponding breach. Our paper lays the groundwork for researchers to better apply the taxonomy approach within cybersecurity research. We also perform regression analysis to identify industries that are most susceptible to various cyber breach events. Our results corroborate with the literature, where some industries are indeed more likely to be impacted by certain types of cyberattacks.

A (In)Tolerância na Aplicação de Penalidades na Administração Pública Brasileira

ABSTRACT Objective: the option to enter into a contract for goods and services has been used by the public sector since ancient times, and to improve the productivity of these contracts, the actors involved have resorted to different forms of incentives. In Brazil, the only form of incentive formally admitted is a sanction, but empirical evidence suggests that some types of breaches of contracts have been overcome through negotiation. We intended to identify which factors influence management’s (in)tolerance regarding misconduct in the execution of government contracts/purchases. Methods: this was based on multiple case studies, the authors’ reflexivity, and abductive logic for the analysis of interviews with experts in the area, analysis of publications in official journals, internet information, and internal documents in 14 government institutions. Results: we present a list of factors that are (in)tolerable by the administration in managing contracts/purchases and their underlying reasons. As a theoretical contribution, this study expands the existing public administration literature by including, innovatively, tolerance theory and misconduct and relating them to administrative contract management. Conclusions: having as foremost concern to improve the productivity of administrative contracts, this study clarifies that tolerating can be legitimate and offers measures that can be taken to inhibit the occurrence of misconduct in government procurement and contracting, based on the recommendations of the servants involved in the management of administrative contracts. Still, a research agenda makes proposals for analysis of new factors and explanations eventually not captured in this study.

Raskid ugovora: Skica i Zakon o obligacionim odnosima

The paper presents an analysis of the regulation of termination of contract due to a breach in the Yugoslav Law on Obligations (1978) and the Draft Code on Obligations and Contracts (1969), prepared by Mihailo Konstantinović. In the area of termination of contract, Konstantinović’s primary source of inspiration was the Uniform Law on the International Sale of Goods (ULIS, 1964). The regulation of breach of contract in the Draft Code is not based on a uniform notion of breach of contract, rather, there are different types of breaches: non-performance (debtor’s default), defective performance, and impossibility of performance. The Legislative Commission, making changes to the Draft Code, retained its structure, including the regulation of different types of breaches, but made changes with regard to termination of contract. Compared to modern model laws, these changes represent some of the key shortcomings of the regulation of this area in the Law on Obligations.

A Generalized Linear Mixed Model for Data Breaches and Its Application in Cyber Insurance

Data breach incidents result in severe financial loss and reputational damage, which raises the importance of using insurance to manage and mitigate cyber related risks. We analyze data breach chronology collected by Privacy Rights Clearinghouse (PRC) since 2001 and propose a Bayesian generalized linear mixed model for data breach incidents. Our model captures the dependency between frequency and severity of cyber losses and the behavior of cyber attacks on entities across time. Risk characteristics such as types of breach, types of organization, entity locations in chronology, as well as time trend effects are taken into consideration when investigating breach frequencies. Estimations of model parameters are presented under Bayesian framework using a combination of Gibbs sampler and Metropolis–Hastings algorithm. Predictions and implications of the proposed model in enterprise risk management and cyber insurance rate filing are discussed and illustrated. We find that it is feasible and effective to use our proposed NB-GLMM for analyzing the number of data breach incidents with uniquely identified risk factors. Our results show that both geological location and business type play significant roles in measuring cyber risks. The outcomes of our predictive analytics can be utilized by insurers to price their cyber insurance products, and by corporate information technology (IT) and data security officers to develop risk mitigation strategies according to company’s characteristics.

Online Attacks Types of Data Breach and Cyber-attack Prevention Methods

Online Attacks Types of Data Breach and Cyber-attack Prevention Methods