DELOITTE Faces Cyber-attack

Experts say that if any hacker wants to hack your website/information/data, they can hack and you can’t stop it. For me it is a surprise and increases the fear factor. No, question comes can I live without it and the answer is obvious. Every day we are hearing of new breach. One of the top accountancy firm “DELOITTE” has come under the cyber-attack.

A fundamental shift is occurring in the management of cyber risk. The idea that cyberattacks are increasingly likely-and perhaps inevitable-is beginning to take hold among executives and boards. Business leaders are realizing that we have interconnected our world mostly using technologies designed for sharing information, not protecting it. They recognize that they have to trust people-their own employees and the third-parties they do business with-to handle sensitive information and operate critical infrastructure.

As cyber threats grow exponentially, businesses struggle to keep up. This ALM report shows that Deloitte is differentiated as one of the few cyber risk consultants with the requisite talent, technical expertise, and global scope to effectively combat the threat,” said Ed Powers, Cyber Risk Services leader, Deloitte & Touche LLP. Deloitte is one of the largest private accounting firms in the U.S. which offers tax, auditing, operations consulting, cybersecurity advisory, and merger and acquisition assistance services to large banks, government agencies and large Fortune 500 multinationals, among others. Deloitte is having it’s SOC (Security operating centre) in various parts of the globe.

Global tax and auditing firm Deloitte has confirmed the company had suffered a cyber-attack that resulted in the theft of confidential information, including the private emails and documents of some of its clients.

The global accountancy firm said Monday that its system had been accessed via an email platform from October last year through this past March and that "very few" of its clients had been affected. The attack was believed to have been focused on the U.S operations of the company, the Guardian report said.
 

Hackers managed to gain access to the Deloitte's email server through an administrator account that wasn't secured using two-factor authentication (2FA), granting the attacker unrestricted access to Deloitte's Microsoft-hosted email mailboxes. Besides emails, hackers also may have had potential access to "usernames, passwords, IP addresses, architectural diagrams for businesses and health information.

Deloitte's internal investigation into the cyber incident is still ongoing, and the firm has reportedly informed only six of its clients that their information was "impacted" by the breach. Deloitte has become the latest of the victim of the high-profile cyber attack.

Tags: DELOITTE, Cyber-attack, cyber attack, ALM report, Ed Powers Cyber Risk Services leader, ed powers, cybersecurity, cyber security, soc, Security operating centre, Global tax,  varindia