C843 Report A SUCCESS OF ATTACK

The cyberattack against Azumer Water was very successful due to administrative and technical shortcomings in the companys information security management implementation. One major factor was a lack of user security awareness training. John Smith, the volunteer coordinator for Azumer Water, carelessly clicked on a link in an email that should have easily been identified as a phishing email. As a result, his account was compromised which led to the database containing the personally identifying information of 1,073 volunteers being compromised as well. Once the attackers gained access to the database, they were able to send out phishing emails to all the volunteers before subsequently deleting the database entirely.

The lack of security awareness...