Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

Apple Commissions Data Breach Study to Highlight Need for End-to-End Encryption

A study commissioned by Apple shows that 2.6 billion personal data records were compromised in breaches in the past two years.

Apple data breach study

A study commissioned by Apple shows that an estimated 2.6 billion personal records were compromised as a result of data breaches in the past two years, which, according to the tech giant, highlights the need for end-to-end encryption. 

The study, titled ‘The Continued Threat to Personal Data: Key Factors Behind the 2023 Increase’, was conducted by MIT professor Dr. Stuart Madnick. It provides a summary of the major data breaches that came to light in the past year and highlights some trends.

It’s worth noting that there is no original data in the report and the number of compromised personal records was obtained through a combination of data from Verizon for 2021 and an estimation for 2022 — 1.1 billion records in 2021 and 1.5 billion in 2022. 

The study looks at ransomware attacks resulting in significant data breaches, companies that were repeatedly targeted by hackers, incidents resulting from cloud misconfigurations, attacks aimed at government organizations and their contractors, and breaches affecting entities that store particularly sensitive personal information.

The report also provides information on regional data breaches, and massive incidents resulting from third-party vendor exploitation.

It also highlights the end-to-end encryption initiatives of various companies over the past decade, including Apple, Google, Meta, Proton, Signal and Skiff. 

Advertisement. Scroll to continue reading.

Apple — similar to other tech giants — has long opposed government requests to implement encryption backdoors that would make it easier for authorities to investigate potential criminal activities. 

In fact, the company has been increasingly implementing end-to-end encryption, and is using the new study to promote its Advanced Data Protection for iCloud, which aims to improve cloud data security. 

The company claims that, when the feature is activated, 23 sensitive data categories are protected using end-to-end encryption, including backups, notes, and photos. This provides protection including against attacks where the cloud environment itself has been compromised. 

Related: Apple Improves iMessage Security With Contact Key Verification

Related: Apple Denies Helping US Government Hack Russian iPhones

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.

Register

This year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.

Register

People on the Move

Fable Security has appointed Jacob Berry as Chief Information Security Officer.

iCOUNTER has named Ali Waezzadah as Chief Information Security Officer.

Roger Hale has joined 1Kosmos as Chief Information Security Officer.

More People On The Move

Expert Insights

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.