Processes and Culture Top Reasons Behind Data Breaches

The article examines the persistence of data breaches, highlighted by a study focused on Massachusetts incidents in 2024. Key issues include underreporting of breaches, particularly in private sectors like finance and healthcare. Panelists at the Massachusetts Municipal Cybersecurity Summit discussed the need for transparency and accountability, underscoring the lack of a federal mandate for breach reporting.

Organizations often delay or avoid reporting due to uncertainty about the breach details or fear of liability. They emphasized the importance of implementing stronger password policies and multifactor authentication to mitigate risks. Despite acknowledging the role of technology, they stressed that culture and processes within organizations must evolve to cope with increasingly sophisticated threats.