Como a inteligência artificial vai afetar o seu futuro? - FCA PUC Minas
Entenda a visão de especialistas sobre mercado de trabalho, ética e implicações sociais das inteligências artificiais.
dados divulgados
De acordo com <anchor>dados divulgados</anchor> em 2021 pelo Instituto de Tecnologia de Massachusetts (MIT), vazamentos de dados aumentaram 493% no Brasil, sendo que mais de 205 milhões de dados de brasileiros foram vazados de forma criminosa em 2019.
Developing a Global Data Breach Database and the Challenges Encountered | Journal of Data and Information Quality
Search ACM Digital Library

SearchSearch

Journal of Data and Information Quality

research-article

Open access

Share on

# Developing a Global Data Breach Database and the Challenges Encountered

Article No.: 3, Pages 1 - 33

19citation4,580Downloads

Metrics

Last 12 Months1,901

Last 6 weeks156

Get Citation Alerts

## New Citation Alert added!

This alert has been successfully added and will be sent to:

You will be notified whenever a record that you have chosen has been cited.

To manage your alert preferences, click on the button below.

## New Citation Alert!

- Contents

Journal of Data and Information Quality (JDIQ)

ACM Digital Library

## Abstract

If the mantra “data is the new oil” of our digital economy is correct, then data leak incidents are the critical disasters in the online society. The initial goal of our research was to present a comprehensive database of data breaches of personal information that took place in 2018 and 2019. This information was to be drawn from press reports, industry studies, and reports from regulatory agencies across the world. This article identified the top 430 largest data breach incidents among more than 10,000 data breach incidents.

In the process, we encountered many complications, especially regarding the lack of standardization of reporting. This article should be especially interesting to the readers of JDIQ because it describes both the range of data quality and consistency issues found as well as what was learned from the database created.

The database that was created, available at https://www.databreachdb.com, shows that the number of data records breached in those top 430 incidents increased from around 4B in 2018 to more than 22B in 2019. This increase occurred despite the strong efforts from regulatory agencies across the world to enforce strict rules on data protection and privacy, such as the General Data Protection Regulation (GDPR) that went into effect in Europe in May 2018. Such regulatory effort could explain the reason why there is such a large number of data breach cases reported in the European Union when compared to the U.S. (more than 10,000 data breaches publicly reported in the U.S. since 2018, while the EU reported more than 160,0001 data breaches since May 2018). However, we still face the problem of an excessive number of breach incidents around the world.

This research helps to understand the challenges of proper visibility of such incidents on a global scale. The results of this research can help government entities, regulatory bodies, security and data quality researchers, companies, and managers to improve the data quality of data breach reporting and increase the visibility of the data breach landscape around the world in the future.

## References

[1]

Akamai. 2020. State of the Internet/Security. Retrieved from https://www.akamai.com/us/en/multimedia/documents/state-of-the-internet/soti-security-financial-services-hostile-takeover-attempts-report-2020.pdf.

[2]

B. Barrett. 2020. Hack brief: An adult cam site exposed 10.88 billion records. Retrieved from https://www.wired.com/story/cam4-adult-cam-data-leak-7tb/.

[3]

Bleeping Computer. 2020. Carnival cruise line operator discloses potential data breach. Retrieved from https://www.bleepingcomputer.com/news/security/carnival-cruise-line-operator-discloses-potential-data-breach/.

[4]

California Department of Justice. 2020. Notification of payment card data breach at the Crack Shack, Encinitas, California. Retrieved from https://oag.ca.gov/system/files/TCS%20-%20CA%20AG%20Exhibit%201-Cover%20letter%20deleted.pdf.

[5]

California Department of Justice. 2020. Subject: Notice of data security incident. Retrieved from https://oag.ca.gov/system/files/PIH%20Health%20-%20Sample%20Notification%20Letter%20v2.pdf.

[6]

California Legistative Information. 2020. California civil code s. 1798.82(a). Retrieved from https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum==1798.82.

[7]

Collections 2-5. 2020. Retrieved from https://www.wired.com/story/collection-leak-usernames-passwords-billions/.

[8]

Cyentia Institute. 2020. 2020 Information risk insights study. Retrieved from https://www.cyentia.com/iris/.

[9]

Digital Shadows. 2020. From exposure to takeover: The 15 billion stolen credentials allowing account takeover. Retrieved from https://resources.digitalshadows.com/whitepapers-and-reports/from-exposure-to-takeover.

[10]

M. Einstein. 2019. Amazing statistics about online data creation. Retrieved from https://iorgforum.org/case-study/some-amazing-statistics-about-online-data-creation-and-growth-rates/.

[11]

Fireeye. 2020. M-Trends 2020. Retrieved from https://www.fireeye.com/current-threats/annual-threat-report/mtrends.html.

[12]

GDPR. 2020. Retrieved from https://ec.europa.eu/info/law/law-topic/data-protection_en.

[13]

I. Goldberg and J. Sa. 2019. The Brazilian general data protection law. Retrieved from https://www.financierworldwide.com/the-brazilian-general-data-protection-law.

[14]

A. A. Hall and C. S. Wright. 2018. Data security: A review of major security breaches between 2014 and 2018. Fed. Bus. Discip. J. 6 (2018), 50--63.

[15]

Healthcare IT News. 2017. Phishing attack on Torrance memorial puts patient records at risk. Retrieved from https://www.healthcareitnews.com/news/phishing-attack-torrance-memorial-puts-patient-records-risk.

[16]

B. Heinrich, D. Hristova, M. Klier, A. Schiller, and M. Szubartowicz. 2018. Requirements for data quality metrics. J. Data Inf. Qua. 9, 2 (Jan. 2018).

[17]

Hipaa Journal. 2020. 2019 Healthcare data breach report. Retrieved from https://www.hipaajournal.com/2019-healthcare-data-breach-report/.

[18]

T. Hunt. 2019. The 773 million record “collection #1” data breach. Retrieved from https://www.troyhunt.com/the-773-million-record-collection-1-data-reach/.

[19]

IANS. 2020. India saw world's largest data breach in 2018 due to lax cyber security. The News Minute. Retrieved from https://www.thenewsminute.com/article/india-saw-world-s-largest-online-data-breach-2018-due-lax-cyber-security-wef-95141.

[20]

IBM. 2019. 2019 Cost of a data breach report. Retrieved from https://www.ibm.com/security/data-breach.

[21]

IBM X-Force. 2020. IBM X-force threat intelligence index 2020. Retrieved from https://www.ibm.com/security/data-breach/threat-intelligence.

[22]

INTERPOL. 2020. Our 18 databases. Retrieved from https://www.interpol.int/How-we-work/Databases/Our-18-databases.

[23]

ITRC. 2020. 2019 End-of-year data breach report. Retrieved from https://www.idtheftcenter.org/2019-data-breaches/.

[24]

ITRC. 2020. Identity theft resource center. Retrieved from https://www.idtheftcenter.org/identity-theft-resource-centers-annual-end-of-year-data-breach-report-reveals-17-percent-increase-in-breaches-over-2018/.

[25]

R. Iyengar. 2020. How your passwords can end up for sale on the dark web. Retrieved from https://edition.cnn.com/2020/05/06/tech/data-breach-passwords-protection/index.html.

[26]

W. James and R. H. Osterburg. 2010. Criminal Investigation: A Method for Reconstructing the Past. Routledge.

[27]

B. Kammel, D. Pogkas, and M. Benhamou. 2019. These are the worst corporate hacks of all time 18 de março. Retrieved from https://www.bloomberg.com/graphics/corporate-hacks-cyber-attacks/.

[28]

Kaspersky Daily. 2020. Beware being breached: why data protection is vital for small businesses. Retrieved from https://www.kaspersky.com/blog/data-protection-for-smb/.

[29]

T. Milo. 2019. Getting rid of data. J. Data Inf. Qual. 12, 1 (Nov. 2019).

[30]

H. Muller, J.-C. Freytag, and U. Leser. 2012. Improving data quality by source analysis. ACM J. Data Inf. Qual 2, 4 (2012)

[31]

L. Nakagawa. 2019. Detran vaza dados pessoais de quase 70 milhões de brasileiros. Retrieved from https://olhardigital.com.br/noticia/-exclusivo-site-do-detran-rn-expoe-dados-de-todos-os-brasileiros-com-cnh/91308.

[32]

N. Novaes Neto, S. E. Madnick, A. M. de Paula, and N. M. Borges. 2020. A case study of the capital one data breach. Retrieved from https://ssrn.com/abstract=3542567.

[33]

Office for Civil Rights. 2020. U. S. Department of Health and Human Services. Retrieved from https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf.

[34]

Office of Consumer Affairs and Business Regulation. 2020. Data breach notification reports. Retrieved from https://www.mass.gov/lists/data-breach-notification-reports.

[35]

K. O'Flaherty. 2019. Marriott CEO reveals new details about mega breach. Retrieved from https://www.forbes.com/sites/kateoflahertyuk/2019/03/11/marriott-ceo-reveals-new-details-about-mega-breach/#dacd7b2155c0.

[36]

Privacy Rights Clearinghouse. 2020. Data breaches. Retrieved from https://privacyrights.org/data-breaches.

[37]

D. Reinsel, J. Gantz, and J. Rydning. 2018. The digitization of the world. Retrieved from https://www.seagate.com/files/www-content/our-story/trends/files/idc-seagate-dataage-whitepaper.pdf.

[38]

Risk Based Security. 2020. 2019 Year end data breach quickview report. Retrieved from https://pages.riskbasedsecurity.com/2019-year-end-data-breach-quickview-report.

[39]

G. Rodgers. 2015. Determining time of death. Retrieved from https://coronertalk.com/28.

[40]

D. E. Salane. 2009. Are large scale data breaches inevitable? Retrieved from http://johnjay.jjay.cuny.edu/files/centers/cybercrime_studies/D_SalaneLargeScaleDataBreaches.pdf.

[41]

Security Magazine. 2017. Average business user has 191 passwords. Retrieved from https://www.securitymagazine.com/articles/88475-average-business-user-has-191-passwords.

[42]

Wired Magazine. 2020. Collections 2-5. Retrieved from https://www.wired.com/story/collection-leak-usernames-passwords-billions/.

[43]

State of California Department of Justice. 2020. HRG healthcare—Notice of data breach. Retrieved from https://oag.ca.gov/system/files/HRG.pdf.

[44]

State of California Department of Justice. 2020. Landry's—Notice of data breach. Retrieved from https://oag.ca.gov/system/files/CA%20AG%20Attachment%20%28Notice%20Only%29.pdf.

[45]

State of California Department of Justice. 2020. Search data security breaches. Retrieved from https://oag.ca.gov/privacy/databreach/list.

[46]

The New Humanitarian. 2020. The cyber attack the UN tried to keep under wraps. Retrieved from https://www.thenewhumanitarian.org/investigation/2020/01/29/united-nations-cyber-attack.

[47]

The United Nations. 2019. World population prospects 2019. Retrieved from https://population.un.org/wpp/.

[48]

U. S. Security Breach Notification Laws. 2020. Retrieved from https://www.ncsl.org/research/telecommunications-and-information-technology/security-breach-notification-laws.aspx.

[49]

U. S. State Data Breach Laws, T. D. 2020. The definitive guide to U. S. state data breach laws. Retrieved from https://info.digitalguardian.com/rs/768-OQW-145/images/the-definitive-guide-to-us-state-data-breach-laws.pdf.

[50]

UN. 2020. UN Data. Retrieved from http://data.un.org/Search.aspx?q=data+breach.

[51]

VerificationsIO. 2020. Retrieved from https://haveibeenpwned.com/PwnedWebsites#VerificationsIO.

[52]

VERIS Community Database. 2020. GitHub - vz-risk. Retrieved from https://github.com/vz-risk/vcdb.

[53]

Verizon. 2019. 2019 Data breach investigations report. Retrieved from https://enterprise.verizon.com/resources/reports/dbir/2019/introduction/.

[54]

Verizon. 2020. 2020 Data breach investigations report. Retrieved from https://enterprise.verizon.com/resources/reports/dbir/.

[55]

Verizon PR. 2019. C-suite beware: You are the latest targets of cybercrime, warns Verizon 2019 data breach investigations report. Retrieved from https://www.verizon.com/about/news/verizon-2019-data-breach-investigations.

[56]

Wells Fargo Bank. 2020. Notice of data breach. Retrieved from https://oag.ca.gov/system/files/Wells%20Fargo%20KDW%20Automotive.pdf.

[57]

D. Winder. 2019. Personal data of entire 16.6 million population of Ecuador leaked online. Retrieved from https://www.forbes.com/sites/daveywinder/2019/09/16/personal-data-from-entire-166m-population-of-ecuador-leaked-online/#64365bd3705d.

[58]

D. Winder. 2020. GoDaddy confirms data breach: What customers need to know. Retrieved from https://www.forbes.com/sites/daveywinder/2020/05/05/godaddy-confirms-data-breach-what-19-million-customers-need-to-know/#19dce45b1daa.

[59]

H. Zhu, Y. Lee, and A. Rosenthal. 2016. Data standards challenges for interoperable and quality data. J. Data. Inf. Qual. 7, 1--2 (2016).

## Cited By

- Oladipo EAdeyemo SOluwasanya GOyinloye OOyeyiola OAkinrinmade IElutade OAreo DHamzat IOlakanmi OAyanronbi IAkanmu AAjekiigbe FTaiwo MOgunfidodo VAdekunle CAdeleke POlubunmi DAdeogun PAdejobi ESanni SAjibade AOnyeaka HNnaji N(2024)Impact and Challenges of Artificial Intelligence Integration in the African Health Sector: A ReviewTrends in Medical Research10.3923/tmr.2024.220.23519:1(220-235)Online publication date: 11-Jun-2024
  https://doi.org/10.3923/tmr.2024.220.235

- Rodrigues GSerrano AVergara GAlbuquerque RNze G(2024)Impact, Compliance, and Countermeasures in Relation to Data Breaches in Publicly Traded U.S. CompaniesFuture Internet10.3390/fi1606020116:6(201)Online publication date: 5-Jun-2024
  https://doi.org/10.3390/fi16060201

- Pimenta Rodrigues GMarques Serrano ALopes Espiñeira Lemos ACanedo EMendonça Fde Oliveira Albuquerque RSandoval Orozco AGarcía Villalba L(2024)Understanding Data Breach from a Global Perspective: Incident Visualization and Data Protection Law ReviewData10.3390/data90200279:2(27)Online publication date: 31-Jan-2024
  https://doi.org/10.3390/data9020027

- Show More Cited By)

## Index Terms

## Recommendations

SACMAT '18: Proceedings of the 23nd ACM on Symposium on Access Control Models and Technologies

Preventing unauthorized access to sensitive data is an exceedingly complex access control problem. In this keynote, I will break down the data breach problem and give insights into how organizations could and should do to reduce their risks. The talk ...

InfoSecCD '06: Proceedings of the 3rd annual conference on Information security curriculum development

Data security breaches are increasing in frequency and scope. Current law provides for remedy to the few victims who suffer immediate identity theft and catch the perpetrators. Little help is now available to those not yet tangibly victimized, whose ...

Abstract

Organisations need to take steps to protect the privacy and security of the personal information they hold. However, when data is breached, how do individuals know whether the organisation took reasonable steps to protect their data? ...

## Comments

## Information & Contributors

### Information

#### Published In

cover image Journal of Data and Information Quality

Journal of Data and Information Quality Volume 13, Issue 1

On the Horizon, On the Horizon and Experience Papers

March 2021

104 pages

ISSN:1936-1955

EISSN:1936-1963

DOI:10.1145/3446835

Copyright © 2021 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

#### Publisher

Association for Computing Machinery

New York, NY, United States

#### Publication History

Published: 15 January 2021

Accepted: 01 November 2020

Revised: 01 November 2020

Received: 01 October 2020

Published in JDIQ Volume 13, Issue 1

#### Permissions

Request permissions for this article.

#### Check for updates

#### Author Tags

#### Qualifiers

- Research-article
- Research
- Refereed

#### Funding Sources

- C6 Bank and Cybersecurity at MIT Sloan

### Contributors



#### Other Metrics

## Bibliometrics & Citations

### Bibliometrics

#### Article Metrics

- 19

- 4,580

Total Downloads

- Downloads (Last 12 months)1,901
- Downloads (Last 6 weeks)156

Reflects downloads up to 07 Sep 2024

#### Other Metrics

### Citations

## Cited By

- Oladipo EAdeyemo SOluwasanya GOyinloye OOyeyiola OAkinrinmade IElutade OAreo DHamzat IOlakanmi OAyanronbi IAkanmu AAjekiigbe FTaiwo MOgunfidodo VAdekunle CAdeleke POlubunmi DAdeogun PAdejobi ESanni SAjibade AOnyeaka HNnaji N(2024)Impact and Challenges of Artificial Intelligence Integration in the African Health Sector: A ReviewTrends in Medical Research10.3923/tmr.2024.220.23519:1(220-235)Online publication date: 11-Jun-2024
  https://doi.org/10.3923/tmr.2024.220.235

- Rodrigues GSerrano AVergara GAlbuquerque RNze G(2024)Impact, Compliance, and Countermeasures in Relation to Data Breaches in Publicly Traded U.S. CompaniesFuture Internet10.3390/fi1606020116:6(201)Online publication date: 5-Jun-2024
  https://doi.org/10.3390/fi16060201

- Pimenta Rodrigues GMarques Serrano ALopes Espiñeira Lemos ACanedo EMendonça Fde Oliveira Albuquerque RSandoval Orozco AGarcía Villalba L(2024)Understanding Data Breach from a Global Perspective: Incident Visualization and Data Protection Law ReviewData10.3390/data90200279:2(27)Online publication date: 31-Jan-2024
  https://doi.org/10.3390/data9020027

- Charoen DKhern-am-nuai W(2024)Revisiting the (disappearing) cost of data breach disclosuresDigital Policy, Regulation and Governance10.1108/DPRG-02-2024-0033Online publication date: 3-Jul-2024
  https://doi.org/10.1108/DPRG-02-2024-0033

- Molitor DRaghupathi WSaharia ARaghupathi V(2023)Exploring Key Issues in Cybersecurity Data Breaches: Analyzing Data Breach Litigation with ML-Based Text AnalyticsInformation10.3390/info1411060014:11(600)Online publication date: 5-Nov-2023
  https://doi.org/10.3390/info14110600

- Utomo SRouniyar AHsu HHsiung P(2023)Federated Adversarial Training Strategies for Achieving Privacy and Security in Sustainable Smart City ApplicationsFuture Internet10.3390/fi1511037115:11(371)Online publication date: 20-Nov-2023
  https://doi.org/10.3390/fi15110371

- Diepenbrock AFleck JSachweh S(2023)An Analysis of Stack Exchange Questions: Identifying Challenges in Software Design and Development with a Focus on Data Privacy and Data ProtectionProceedings of the 18th International Conference on Availability, Reliability and Security10.1145/3600160.3605465(1-7)Online publication date: 29-Aug-2023
  https://dl.acm.org/doi/10.1145/3600160.3605465

- Mundt MBaier H(2023)Threat-Based Simulation of Data Exfiltration Toward Mitigating Multiple Ransomware ExtortionsDigital Threats: Research and Practice10.1145/35689934:4(1-23)Online publication date: 20-Oct-2023
  https://dl.acm.org/doi/10.1145/3568993

- Düzgün BÇayır AÜnal UDağ H(2023)Network intrusion detection system by learning jointly from tabular and text‐based featuresExpert Systems10.1111/exsy.13518Online publication date: 12-Dec-2023
  https://doi.org/10.1111/exsy.13518

- Zadeh ALavine BZolbanin HHopkins D(2023)A cybersecurity risk quantification and classification framework for informed risk mitigation decisionsDecision Analytics Journal10.1016/j.dajour.2023.1003289(100328)Online publication date: Dec-2023
  https://doi.org/10.1016/j.dajour.2023.100328

- Show More Cited By)

## View Options

### View options

#### PDF

View or Download as a PDF file.

#### eReader

View online with eReader.

#### HTML Format

View this article in HTML Format.

### Get Access

#### Login options

Check if you have access through your login credentials or your institution to get full access on this article.

#### Full Access

## Media

### Figures

### Other

## Tables

## Share

### Share

#### Share this Publication link

Copy Link

Copied!

Copying failed.

#### Share on social media

XLinkedInRedditFacebookemail

#### Affiliations



Nelson NovaesNeto

Cybersecurity at MIT Sloan, MIT Sloan School of Management



StuartMadnick

Cybersecurity at MIT Sloan, MIT Sloan School of Management 8 MIT School of Engineering



Anchises Moraes G. DePaula

C6 Bank



Natasha MalaraBorges

C6 Bank

Go to

Go to

Show all references

Request permissionsExpand All

Collapse

Expand Table

## Export Citations

Select Citation formatBibTeXEndNoteACM Ref

- Please download or close your previous search result export first before starting a new bulk export.

Preview is not available.

By clicking download, a status dialog will open to start the export process. The process may take a few minutes but once it finishes a file will be downloadable from your browser. You may continue to browse the DL while the export process is in progress.

Download

- ```
  ```