How the Capital One Breach Could Have Been Avoided With Application-Layer Data Encryption

Image credit: Unsplash

In July 2019, Capital One became aware of a data breach inside their Amazon Web Services (AWS) cloud infrastructure. A security researcher found social media posts describing the attack, and after investigating the breach, the company discovered that the attacker was able to steal the personal information of approximately 100 million individuals in the United States and 6 million in Canada.

Data Wave in the Cloud: Reconsidering Cloud Security

When organizations originally started to move data to the cloud in a meaningful way, the security conversation usually centered around one tactic – access. After all, if you could ensure that only the right people had access to a particular cloud, your data would be safe, right? Not quite.

As we continue to see an increase in data breaches impacting data stored in the cloud, it’s clear that access, in and of itself, isn’t the silver bullet solution. If bad actors want to get your data, they will find a way — they study each new access control technology until they find its vulnerability. Continuing to simply apply another control that hackers will again unlock is a never-ending, no-win prospect — and not cost-effective. In fact, though organizations pour more money into data security, breaches continue to increase.