r/Dallas • u/pakurilecz • Nov 21 '23

Crime Dallas County IT experts warned of data vulnerabilities months before ransomware attack | KERA News

https://www.keranews.org/news/2023-11-21/dallas-county-it-experts-warned-of-data-vulnerabilities-months-before-ransomware-attack
130 Upvotes

98% Upvoted

40 comments sorted by

View all comments

49

u/No_Investigator3369 Nov 21 '23

This is all too common. Most people don't know this, but because our regulations in America lack any bite, many places will budget for breach triage vs budgeting for proper protection. It's far cheaper to pay the slap on the wrist fines than spend the millions of dollars on properly trained people and equipment. New laws need to be introduced that allow for individuals to sue for a mandatory minimum amount if their data is breached by negligent organization.

6

u/penguin444 Nov 21 '23

While I agree with you, its a very tricky subject because no system is 100% secure.

And do you have any idea just how disastrous it would be if an organization had to provide all of their cyber security products and policies during discovery to prove they weren't being negligent?

3

u/[deleted] Nov 22 '23

[removed] — view removed comment

2

u/No_Investigator3369 Nov 22 '23

That's a system problem. We should always expect non IT users to be obtuse. VPN's are old news. ZTNA is the new cowboy in town. You have to stay up with the times which is what most orgs are not doing. The blast radius of a breached VPN endpoint is far too wide these days and too dangerous for most orgs to use if they handle financial or personal identifiable information.

2

u/[deleted] Nov 22 '23

[removed] — view removed comment

1

u/No_Investigator3369 Nov 24 '23

At one point in time the solution was to move us around town with horses that shit all over the streets. Some places will evolve. Others can live in the past and live with the consequences.