Intelligent CISO Issue 23 | Page 24

threat updates UK An issue regarding the failure of a Teesside council’s IT systems is believed to be the result of a suspected cyberattack. Redcar and Cleveland Council has said that there is no evidence to suggest personal data had been lost and that it was still able to receive and answer limited calls and emails, prioritising urgent messages. Matt Rahman, COO for IOActive, believes organisations are far too reactive as they don’t look at their own environments and infrastructure to understand where threats may naturally occur. He said it is therefore right that people are calling for a serious review of the council’s IT systems after such a long outage. Rahman believes organisations need to look at their infrastructure from a hacker’s perspective. GLOBAL Cosmetics giant, Estée Lauder, has come under scrutiny as its database exposed around 440 million data records, according to researchers. The records were said to have contained email addresses but didn’t include any sensitive employee information. The company said that it was made aware that a limited number of non-consumer email addresses from an education platform were temporarily accessible via the Internet. This education platform was not consumer-facing, nor did it contain consumer data. The company found no evidence of unauthorised use of the temporarily accessible data. 24 Issue 23 | www.intelligentciso.com