Someone I know work in a company that was recently hit by a cyberattack. Hackers took data and deleted them locally. In those data were some sensitive information (ID card scan, bank cards). Don’t get me wrong, I think everyone is to blame here (not all at the same level), but The employer for both asking such information (you don’t need the bank card, only the IBAN for salary, nor the ID card, what the hell do you keep this ?) and cheaping out on the IT contractors The IT contractors for not providing enough security (I know you can’t be 100% bullet proof, but from what I heard from gossip, it was 1-2% bulletproof) The person I know for accepting to provide its ID and bank cards (A side-question : is it customary to ask for ID and bank cards as a employer ? What do you use it for ?) But then come the fourth to blame: the police. They (a cyber specialist) came to the company location (along incident response contractors), came on site, wrote a report, and didn’t even talk to the employees about potentials next steps for them about their data. To not be in complete bad faith to them, they may not have supposed that there would be such sensitive data in question. Worse, I tried to phone the non-emergency line, wanting to (get information if my friend had to) declare a theft on the ID card. I got told without a second thought “as long as it’s not physical, you can’t declare a theft”. So now I’m asking myself, is this really the state of the cybersecurity (as in “how to help the population”) in the police, are my expectations too high, or am I simply delusional ? Is this the same in every canton ? (Just in case, I have read the rules) submitted by /u/DiraD
Originally posted by u/DiraD on r/Switzerland