News of data breaches is all too common. This company apologizes for six million accounts breached. That company acknowledges hackers accessed 35,000 users’ personal identifiable information. But the question that probably matters most: Is your data breached, too?

The company should contact you if your information is in a data leak, but you can’t rely on that. You can also find out if your phone number or email address has been leaked by visiting https://haveibeenpwned.com/.

HaveIBeenPwned has uploaded various breaches and consolidated the information to make searching easy. Enter your address and get a list of breaches that compromised that email. You’ll get a summary paragraph as well as a description of data compromised in each breach.

It is not uplifting reading!

Next, the question is what to do about your breached information.

Steps to Better Security
First, change your passwords for those breached accounts. If you use that same password to access other accounts, change those passwords, as well, even if they are not listed as leaked.

Always avoid reusing passwords. Yes, it can be a hassle to remember many different access credentials, but you risk exposing many accounts if you keep reusing one email address and password combo over and again.

Make using unique passwords for all accounts easier by using a password manager. A manager can store your many passwords in one place and generate strong ones to use. You can often download an app to your mobile device, which gives you the convenience of filling in your credentials when you’re on the go, too.

The next step is to use two-factor authentication (2FA).

Understanding 2FA
This adds a layer of difficulty for hackers trying to access your accounts. Even if they had your username and password, they would need a second way to verify your identity.

Using 2FA requires you to provide one of the following before you can gain access:

• something you know (e.g. the answer to a secret question);
• something you have (e.g. your smartphone);
• something you are (e.g. your fingerprint).

A bad actor would need to have not only your leaked credentials but also your other "something."

A common approach to FA is an SMS text message or voice-based authentication. You enter your credentials, then the site follows up with a text or phone call providing a separate code you must then enter. This is not the best method, however. Scammers can hack the SIM card associated with your device, and then use your number to make and receive calls and texts.

Software tokens for 2FA are a safer solution. You’ll download and install an application on your phone (e.g. Authy or Okta Verify). It can generate a unique verification code that is valid only for 30–60 seconds.

Want to learn more about password management and soft-token 2FA. We’re here to help. Contact us today at (888) 234-WDIT(9348).

Many business tools are moving to the cloud. One popular option is Microsoft 365, formerly known as Office 365. This unified platform consolidates Excel, Word, and PowerPoint with collaboration and communication tools. Added apps and services help streamline operations, too. Simplifying your IT infrastructure can also cut costs and reduce duplication of effort. Still, when you’re leveraging the convenience of Microsoft 365, data backup is your job.

When all software was on-site on business servers and machines, you had complete control. The IT team kept the systems up to date, virus-free, and running smoothly. They built in redundancy to ensure data recovery. They planned for natural disaster, human error, malicious attack, ransomware, or hardware misconfiguration.

Now, though, IT doesn’t have the same control. With the transition to Microsoft 365, the job has changed. Microsoft makes sure its users can continue to access SharePoint or Teams in the event of a disaster, but this doesn’t mean they are responsible for backing up your data – that’s your responsibility.

As do many cloud-based vendors, the company says you own and control your data. They ensure service availability, but you need to set up your own data backup in case of a hack, employee error, or failing to install a security patch.

What does Microsoft 365 Backup?

Reducing downtime is a big reason to backup data. Resilience in the wake of a data breach helps establish credibility with customers, investors, and employees. You may also need backups for compliance with legal guidelines and industry standards.

Yes, you can restore some data within Microsoft 365, but only in the short term. For instance, you can recover information from your deleted-items folder. When something is deleted from that folder, an administrator can often recover it from a system-wide recycling bin.

The thing is, Microsoft 365 doesn’t hold data for that long. It can range from two weeks to a month, depending on your configuration. Plus, you’re not in control of when data is purged, from which there is no recovery.

Microsoft's datacenter redundancy and data replication efforts support service uptime. It won’t matter if your data is breached, encrypted, or irretrievable due to a hardware failure, flood, or fire.

You need your own data backup. We recommend that you have "snapshots" of your data in three places: one is on-site on a local, protected computer or device; another would be on a remote device; and the third would be in the cloud with a reputable third-party backup provider.

Test Your Backup

Having a backup of Microsoft 365 data offers reassurance that your business can bounce back. Still, don’t get complacent just yet. Along with having a process in place to back up your data, also plan on testing backups.

Testing helps you learn how effectively you can recover following data loss. Plus, testing backups saves you from finding out in a crisis that something has been wrong all along.
​
Protect your business from data loss and lengthy downtime with your own data backup. We can offer you backup services and help get your company up and running again if the worst does happen. Contact us at (888) 234-WDIT(9348) for help today!