Be aware of data exfiltration risk

What to do

Be aware that cyber criminals will try to steal data from Monash systems and devices.

How it happens

Data exfiltration happens in two ways, through outsider attacks and insider threats.

Outsider attacks

An outsider attack occurs when an individual infiltrates a network to steal corporate data and potentially user credentials. This typically is a result of a cyber criminal injecting malware onto a device, such as a computer or smartphone, that is connected to the Monash University network.

Insider threats

Insider threats can be malicious, for example a staff member stealing their own organisation’s data and sending documents to their personal email address or cloud storage services – potentially to sell to cyber criminals.

Insider threats can also be caused unintentionally by careless behaviour that sees corporate data fall into the hands of bad actors.

Why it matters

Failing to control information security can lead to data loss that could cause reputational and financial damage to Monash.