How much personally identifiable information (PII) do companies actually need to store? Organizations are collecting massive amounts of data from customers, mobile devices, and more. Not all of it is stored securely: A roundup from cybersecurity company Huntress, for example, showed that billions of records containing PII are exposed from large-scale data breaches. How does this happen? Ken Braatz, CTO for SupportNinja, told IT Brew that PII is harvested from users across browsers, search activity, cookies, and more. Companies tap that information to build and sell products. But more data means more IT infrastructure such as storage, which means a larger attack surface. This is especially true when companies choose to hold onto particularly valuable information such as payment data, Social Security numbers, and more. “I think a lot of companies out there view customer data as the Holy Grail, and in that they want all of the data and they turn that data into a massive asset,” Braatz said. “I don’t believe that having confidential PII is necessary to deliver value to the customers.” Keep reading on IT Brew.—CN |