Re: WSJ Article - A Contrarian View on Data Breaches

["Torgersen, Eric A" <etorgersen () ALBANY EDU>]

Actually, it does look like the breach did impact Target’s sales, at least for some period of time:

http://www.usatoday.com/story/money/business/2014/03/11/target-customer-traffic/6262059/

http://www.nytimes.com/2014/05/22/business/after-more-weak-earnings-target-lowers-forecast.html?_r=0

Eric Torgersen
Senior Systems Analyst
ITS Systems Management & Operations
518-250-9725

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Harry 
Hoffman
Sent: Tuesday, August 05, 2014 10:00 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] WSJ Article - A Contrarian View on Data Breaches


As far as I know Target suffered no loss of sales as a result of the breach so how exactly are we measuring impact?

UMD would be a great one to look at. Maybe Jack can chime in on whether or not they've been able to measure impact.

Cheers,
Harry
On Aug 5, 2014 9:51 AM, Peter Lundstedt <peter.lundstedt () drake edu<mailto:peter.lundstedt () drake edu>> wrote:
I agree that reputational damage is much harder to measure than financial damage.  It seems like it takes an extreme 
event with a large scope to have a noticeable impact.  I would say the Target breach had a reputational impact, as did 
the one impacting UMD earlier this year.  These are attacks you still see in the news months after the original 
notification.

Peter Lundstedt|  Information Security Analyst
Drake Technology Services (DTS) | Drake University

From: Harry Hoffman [mailto:hhoffman () ip-solutions net]
Sent: Tuesday, August 05, 2014 8:28 AM
To: Peter Lundstedt
Cc: security () listserv educause edu<mailto:security () listserv educause edu>
Subject: Re: WSJ Article - A Contrarian View on Data Breaches

I’d love to see some hard evidence of reputational damage. Folks always point to it as a major concern but I’ve yet to 
see one organization show anything tangible in regard to damaged reputation.

Cheers,
Harry


On Aug 5, 2014, at 9:06 AM, Peter Lundstedt <peter.lundstedt () drake edu<mailto:peter.lundstedt () drake edu>> wrote:

Curious if anyone read the article in today’s Wall Street Journal titled A Contrarian View on Data Breaches.

The interviewees seem to have a viewpoint around what’s best for their bottom line and for their shareholders, rather 
than what may be best for the cardholder.  We’ve never suffered a breach (that we know of) but I can’t imagine trying 
to keep it under wraps in hope that our reputation would not suffer.

Interested in others opinions.

Article Link<http://online.wsj.com/articles/a-contrarian-view-on-data-breaches-1407194237?mod=WSJ_hp_LEFTTopStories>

Peter Lundstedt|  Information Security Analyst
Drake Technology Services (DTS) | Drake University