Cyber-Ark says its survey of 300 IT security professionals shows that they would target information including CEO passwords, customer databases, financial reports, merger and acquisitions plans and lists of privileged passwords. Only 12 per cent say they would leave empty handed.
Cyber-Ark co-founder and chief executive Udi Mokady recommends that companies secure sensitive information in a digital vault, only giving individuals access to the information they actually need.
He says: “Most company directors are blissfully unaware of the administrative or privileged passwords that their IT guys have access to which allows them to see everything that is going on within the company.
“These privileged identities, which lie on hundreds of servers and applications, very rarely get changed as it’s often considered too much hassle. When people leave the organisation, they can often still access the network using these passwords to acquire an organisations’ most sensitive information.”