"This year is opening up a new trend for us

[tanjimajuha20]

Technical Director of ITentika Neva LLC Alexander Chichenin believes that SearchInform's data is realistic: "The data obtained by SearchInform looks realistic. At the same time, it is worth noting the excessive focus on the technical aspects of the issue. The fact is that most significant leaks of personal data now occur primarily through the use of social engineering, and not software vulnerabilities."

Lead engineer of CorpSoft24 bulgaria whatsapp number database Mikhail Sergeev believes that increasing liability will eliminate the current situation where software costs more than a fine for a leak: "It is easier to pay a fine than to buy and maintain expensive software, but this mainly applies only to small businesses. But small businesses will not engage in data protection, perhaps it will be unprofitable and will not pay off, data protection and specialists are very expensive, businesses simply have nowhere to get money for such protection."

- hackers will try to attack large organizations that process large amounts of data. Unfortunately, we cannot completely rule out major incidents yet. Even despite the strengthening of the information security framework in almost all Russian companies, we should be prepared for the fact that data can "leak" from there. Therefore, it is definitely not the time to relax," emphasized State Duma deputy Anton Nemkin, commenting on the recent incident, during which more than 500 million records containing personal data of Russians were leaked into the public domain. "In Russia, "trusted" personal data operators should appear who, after undergoing special accreditation, will prove that they are ready to ensure the safe storage of confidential information not only of their clients, but also, for example, of third-party organizations."

Innostage product manager Evgeny Surkov is one of the optimists, although he admits a decrease in the total number of customers: "Mostly positive. However, the effect may be twofold - for example, demand and the check will increase for some customers, but at the same time the number of customers themselves will decrease, and there will be a concentration of demand."

However, according to analysts at Kaspersky Digital Footprint Intelligence, a clear trend has already emerged by the end of 2023 that Russian companies have begun to hide leaks more often. Evidence of this is that the number of publications about user data leaks in 2023 decreased by 8% compared to the previous year, while the number of published user data lines in 2023 increased by 24%.

For whom it is unprofitable to defend oneself
"We will definitely see a category of companies that will not improve data protection measures or will not deal with the issue of data protection at all. Those who will not increase investments in security are mainly focused on opportunities rather than risks - otherwise it is difficult to talk about business as such. In principle, such an approach is part of the norm for entrepreneurial activity," Rustem Khairutdinov points out. "In addition, if you look at the structure of leaks, they rarely occur from the outside, for example, as a result of hacks. As a rule, they are associated with problems in IT infrastructure, cloud storage, etc. Analysis of leaks shows that the problem is much deeper than just the lack of protection. But they will still be bought."

Ruslan Dobrynin, an expert at the Dozor Product Center of Solar Group, does not see any great prospects for revenue growth for information security vendors: "Turnover fines will undoubtedly somewhat spur sales of specialized tools for combating leaks, but we do not expect a sharp increase in sales: almost all notable operators of any sensitive data already use DLP systems. There are some doubts that small commercial companies that handle personal data will bother to implement an expensive leak protection system: in some cases, a turnover fine may be cheaper for them, and the reputational aspect may not bother them too much, plus some excessive confidence of such operators in their own security cannot be ruled out. And personal criminal liability in such cases seems to be an adequate measure of influence."