The 2021 Financial Data Risk Report Reveals Every Employee Can Access Nearly 11 Million Files

Financial services organizations must safeguard tons of highly sensitive information, but data is often left exposed to far too many people. If just one employee clicks on a phishing email,...
1 min read
Last updated October 14, 2022

Financial services organizations must safeguard tons of highly sensitive information, but data is often left exposed to far too many people. If just one employee clicks on a phishing email, attackers will move into action fast – and they’ll be able to copy, change, encrypt or delete any files the victim can touch. Pretty scary, huh?

To highlight the most common and pervasive issues around enterprise data security, we developed the 2021 Financial Data Risk Report. The new report delves into the state of data security – on-premises, cloud, and hybrid environments – for banking, insurance, and investment companies.

We analyzed a random sample of Data Risk Assessments for 56 companies to uncover how exposed companies really are. Our analysts crunched the numbers and examined 4 billion files for the report.

Here are just a few key findings:

  • A financial services employee has access to nearly 11 million files. For larger companies, the number doubles to 20 million files.
  • 20% of all folders are open to every employee.
  • 39% of companies have over 10,000 stale — but enabled — user accounts.
  • Nearly two-thirds of companies have 1,000+ sensitive files open to every employee.
  • About 60% of companies have 500+ passwords that never expire.

 

Read the full report: 2021 Financial Services Data Risk Report

👋 Want to see where you stack up?

Get a highly customized data risk assessment run by engineers who are obsessed with data security. Request yours at https://info.varonis.com/start

What should I do now?

Below are three ways you can continue your journey to reduce data risk at your company:

1

Schedule a demo with us to see Varonis in action. We'll personalize the session to your org's data security needs and answer any questions.

2

See a sample of our Data Risk Assessment and learn the risks that could be lingering in your environment. Varonis' DRA is completely free and offers a clear path to automated remediation.

3

Follow us on LinkedIn, YouTube, and X (Twitter) for bite-sized insights on all things data security, including DSPM, threat detection, AI security, and more.

Try Varonis free.

Get a detailed data risk report based on your company’s data.
Deploys in minutes.

Keep reading

Varonis tackles hundreds of use cases, making it the ultimate platform to stop data breaches and ensure compliance.

anatomy-of-a-salesforce-data-breach:-stopping-user-impersonation
Anatomy of a Salesforce Data Breach: Stopping User Impersonation
How a bad actor systematically impersonates users to exfiltrate millions of Salesforce records.
why-data-centric-security-is-important-for-the-dod
Why Data-Centric Security is Important for the DoD
Learn how Varonis protects DoD environments by utilizing various approaches to secure sensitive data.
varonis-incident-response:-stopping-microsoft-365-direct-send-abuse 
Varonis Incident Response: Stopping Microsoft 365 Direct Send Abuse 
Learn how Varonis Threat Labs uncovered a critical Microsoft 365 Direct Send exploit, and how organizations leveraged Varonis Incident Response to protect themselves from attack. 
creating-custom-gpts-and-agents-that-balance-security-and-productivity
Creating Custom GPTs and Agents That Balance Security and Productivity
Custom GPTs and AI agents compound productivity, but with that comes added risk. Learn about ChatGPT's custom GPTs and how to build them with data security in mind.