Although every data or security breach is different, there are a few important steps smaller businesses can take after exposure, says Angela Anderson, Coastal Community Bank SVP, Information Security Officer.

Although every data or security breach is different, there are a few important steps smaller businesses can take after exposure, says Angela Anderson, Coastal Community Bank SVP, Information Security Officer.

Steps to take if your business experiences a data or security breach

Data breaches are becoming more and more common as hackers get more sophisticated. Your business can be exposed to a breach through a vendor or organization. For example, according to the Washington Policy Center, the Washington State Department of Licensing data breach in January exposed the data of 650,000 former and current business owners. You may also experience hackers taking personal information from your server, or succeeding at phishing or spoofing attempts.

“It’s not a matter of if, it’s a matter of when it will happen,” said Angela Anderson, Coastal Community Bank SVP, Information Security Officer. Anderson oversees the Bank’s Information Security and Fraud Investigation teams and is seeing more fraud attempts, which are happening throughout the financial industry.

“We’re seeing and hearing about more fraud and security breaches for small businesses than we are for larger businesses, mostly because they don’t have the same level of resources to invest in systems and policies to protect them,” she said. “However, regardless of your preparedness, every person and business is at risk of being hacked through their personal or business accounts or through the vendors or organizations they do business with that are equally at risk for hacking and breaches.” She warns, “This isn’t going to stop. It will continue to worsen as hackers develop new skills and tactics.”

Anderson has counseled area businesses after they experience a data or security breach and advises businesses should take a few important steps after they learn of an incident. Although every breach is different, she said these steps may help your business after exposure.

Secure Your Operations: To prevent multiple breaches, secure physical and data sources related to the breach. Change access codes, credentials, and passwords and stop additional data loss by taking all affected equipment offline so you can assess the scope and source of the breach.

Investigate the breach: Find out how it happened and what information was accessed or stolen.

Fix Vulnerabilities: Review service provider and vendor access and review access privileges. Review your network. Is it segmented so that a breach on one server cannot be extended to another server or site? If your business outsources your storage and network, talk to your provider.

Communicate: Assess who needs to receive communication or be notified about the incident and who’s affected, i.e., employees, customers, investors, vendors, business partners, other stakeholders, your legal team, and law enforcement. When planning your communications, include key details that might help those at risk protect themselves and their information. Avoid publicly sharing information that might put affected parties at further risk. Keep communication lines open. Be transparent with your employees and customers about what happened and what you are doing to fix the problem.

Plan for the next one: After experiencing a data breach, protect your business from the next one. Train employees on what to look for, review all systems, set up alerts, change passwords regularly, set up 2-factor authentication, and monitor financial accounts.

“After you’ve experienced a breach or your business has experienced security risk, set up the systems to protect your business from future attacks or breaches because your business will always be a target,” Anderson said. She advises businesses to refer to the Federal Trade Commission website for resources and guides to help respond to and protect their business and customers from attacks.

Angela Anderson is the Information Security Officer at Coastal Community Bank. For more information, please contact a banker at one of Coastal’s 14 local branches. Member FDIC. Equal Housing Lender.

Talk to us

More in Herald Business Journal

FILE - A Boeing 737 Max jet prepares to land at Boeing Field following a test flight in Seattle, Sept. 30, 2020. Boeing said Tuesday, Jan. 10, 2023, that it took more than 200 net orders for passenger airplanes in December and finished 2022 with its best year since 2018, which was before two deadly crashes involving its 737 Max jet and a pandemic that choked off demand for new planes. (AP Photo/Elaine Thompson, File)
Boeing inks deal for up to 300 737 Max planes with Ryanair

At Boeing’s list prices, the deal would be worth more than $40 billion if Ryanair exercises all the options.

Logo for news use featuring Snohomish County, Washington. 220118
Four recognized for building a better community

Economic Alliance of Snohomish County hosts annual awards

Logo for news use featuring Snohomish County, Washington. 220118
Business Briefs: Pandemic recovery aid and workforce support program

Snohomish County launches small business COVID recovery program, and is now accepting NOFA grant applications.

Elson S. Floyd Award winner NAACP President Janice Greene. (Olivia Vanni / The Herald)
Janice Greene: An advocate for supplier diversity and BIPOC opportunities

The president of the Snohomish County NAACP since 2008 is the recipient of this year’s Elson S. Floyd Award.

Emerging Leader Rilee Louangphakdy (Olivia Vanni / The Herald)
Rilee Louangphakdy: A community volunteer since his teens

Volunteering lifted his spirits and connected him with others after the death of a family member.

Emerging Leader Alex McGinty (Olivia Vanni / The Herald)
Alex Zitnik-McGinty: Find a group you like and volunteer!

Her volunteer activities cover the spectrum. Fitting in “service work is important as we grow.”

Opportunity Lives Here award winner Workforce Snohomish and director, Joy Emory. (Olivia Vanni / The Herald)
Workforce Snohomish receives Opportunity Lives Here Award

Workforce offers a suite of free services to job seekers and businesses in Snohomish County.

Henry M. Jackson award winner Tom Lane. (Olivia Vanni / The Herald)
Tom Lane: An advocate for small and local businesses

The CEO of Dwayne Lane’s Auto Family is a recipient of this year’s Henry M. Jackson Award.

John M. Fluke Sr. award winner Dom Amor. (Olivia Vanni / The Herald)
Dom Amor: Working behind the scenes to improve the region

Dom Amor is the recipient of this year’s John M. Fluke Sr. Award

Dr. David Kirtley at the new Helion headquarters in Everett, Washington on Wednesday, Jan. 19, 2022  (Olivia Vanni / The Herald)
Everett nuclear fusion energy company nets first customer: Microsoft

The Everett company, on a quest to produce carbon-free electricity, agreed to provide power to the software giant by 2028.

Hunter Mattson, center, is guided by Blake Horton, right, on a virtual welding simulation during a trade fair at the Evergreen State Fairgrounds in Monroe, Washington, on Wednesday, May 3, 2023. High school kids learned about various trades at the event. (Annie Barker / The Herald)
Trade fair gives Snohomish County kids glimpse of college alternatives

Showcasing the trades, the Trade Up event in Monroe drew hundreds of high school students from east Snohomish County.

A Tesla Model Y Long Range is displayed on Feb. 24, 2021, at the Tesla Gallery in Troy, Mich.  Opinion polls show that most Americans would consider an EV if it cost less, if more charging stations existed and if a wider variety of models were available. The models are coming, but they may roll out ahead of consumer tastes. And that could spell problems for the U.S. auto industry, which is sinking billions into the new technology with dozens of new vehicles on the way.  (AP Photo/Carlos Osorio)
Tesla leases space at Marysville business park

Elon Musk’s electric car company reportedly leased a massive new building at the Cascade Business Park.