Page 77 - P&P11-05-2020-with-FAQ-JR

77

Introduction:

st
Data Breaches are a fact of life in the 21 century and are likely to get worse. Protection of client data is
very important to Cornerstone and we will do everything within reason to protect client data.

However, companies 1,000 times larger than Cornerstone have been hacked. The military has been hacked. The
White House has been hacked. I can safely assume all of these organizations had the highest quality data
protection software and policies and procedures in place. Yet they were victims of attack.

● 11/2015 - Georgia Sec’y of State - 6,000,000 voters Soc Sec numbers & other private info
● 11/2015 - FBI - Thousands of arrest records and potentially hundreds of thousands of law enforcement
personnel
● 10/2015 - CIA Director’s email account hacked by teens
● 10/2015 - Scottrade - 4,600,000 Soc Sec numbers, emails and other private data
● 10/2015 - T-Mobile - 15,000,000 Private customer application info
● 7/2015 - Harvard U - (Penn State in May) Compromised the data of 18,000
● 7/2015 - Army National Guard - Breach exposed 850,000 current and former Guard members.
● 6/2015 - Office of Personal Management - 25,700,000 Federal Workers in 2 attacks exposed personnel info
and security info.
● 6/2015 - LastPass - Cyberattack compromised emails & passwords
● 6/2015 - Kaspersky Lab - Nation-state sponsored attack. Stole info on newest technologies
● 2/2015 - Anthem - 80,000,000 records stolen
● 3/2015 - Premera Blue Cross Blue Shield - 11,200,000 subscriber’s info stolen
● 2015 - Home Depot - Malware installed on cash registers stole 56,000,000 credit cards
● 5/2015 - IRS - 334,000 records stolen
● 8/2014 - JP Morgan - 83,000,000 customer and small businesses compromised
● 5/2014 - Ebay - 145,000,000 users login credentials and addresses
● 1/2014 - Target - 70,000,000 customer credit cards stolen

By 09/30/2020, according to the Identity Theft Resource Center, there have been 1,149 breaches so far in 2020
exposing millions of people’s data. And this doesn’t include the many, many breaches that have had an unknown
number of files exposed. It is safe to say that just about everyone’s data has already been exposed and stolen
somewhere else.

This doesn’t mean we are not taking the threat seriously, but if the Army, Home Depot, the IRS, the CIA, Blue
Cross and Kaspersky can’t protect themselves with what I can only imagine were seemingly impenetrable
protections in place, then how are we supposed to do it?

We are constantly looking for what is new and best at protection and upgrading our protections.