The sophistication of cybercriminals intensifies with emerging strategies for cashing in or causing chaos

COSTA MESA, Calif., Jan. 25, 2024 – While tried and true tactics like phishing and malware are here to stay, there are always new approaches to watch out for in the cybersecurity space. Experian’s 11th annual Data Breach Industry Forecast includes six predictions for 2024 that focuses a global lens on what savvy moves cybercriminals from near and far will potentially make to penetrate organizations and reap rewards.

While 2023 was a “successful” year for bad actors, we may see the following emerge to shake up the cyber landscape even more this year:

• Six Degrees of Separation: There’s no question third-party data breaches have made headlines. With increased data collection, storage and movement there are plenty of partners down the supply chain that could be targeted. We predict attacks on systems four, five or six degrees from the original source as vendors outsource data and technology solutions who outsource to another expert and so on.
• Little by Little Becomes A lot: When trying to achieve a goal, it’s said that taking small steps can lead to big results. Hackers could apply that same rule. Instead of making drastic moves and trying to reap instant reward such as with ransomware, bad actors may just manipulate or alter the tiniest bits of data to stay under the radar such as changing a currency rate or adjusting the coordinates for transportation, which can have a major impact.  
• Not a Third Wheel: It’s widely known who the major players are globally that sponsor attacks and a new country in South Asia may join the international stage with their large population of engineers and programmers. While reportedly having been in the game focusing cyberattacks regionally due to political tensions, this country may broaden their sights in the future.  
• No, not Mother Earth!: Plutonium, terbium, silicon wafers — these rare earth materials that are the building blocks for today’s hardware are rapidly becoming the most sought-after resources on the planet. Any disruption to an already strained supply chain could send the industry (and the economy that relies on these materials) spinning. This presents an intriguing opportunity for hackers looking to create disruption, or nation-states wanting to corner a market or disrupt an enemy’s economy.
• The Scarface Effect: Like drug cartels, cybergangs are forming sophisticated organizations as joining like-minded actors can be incredibly advantageous. This spans globally with countries potentially helping each other to advance common goals and interests. We’ll see more hackers for trade, crews looking to expand their monopolies, and cyberwarfare alliances.
• Winning from the Inside: In 2024, we may see enterprising threat actors target more publicly traded companies to gain insights to cheat the stock market or plan their attacks and sell their stash before value nosedives. Rather than breach an organization and play in the underground with stolen data, threat actors could leverage data extraction and their talents in plain sight as everyday investors.

“Cybercriminals are continually working smarter not harder,” said Michael Bruemmer, vice president, Global Data Breach Resolution at Experian. “They are leveraging new technologies like artificial intelligence and applying their talents in different ways to be more strategic and stay a step ahead. Organizations should not ignore even the slightest security abnormalities and be more aware of what global interests may make them a target.”

To access the complimentary report, visit https://ex.pn/2024databreachindustryforecast.

“Today, perpetrators can come from anywhere in the world and bring with them robust resources and expertise,” added Jim Steven, Head of Crisis and Data Response Services at Experian Global Data Breach Resolution in the United Kingdom. “There are many global crime syndicates and nation-backed operations, so companies need to invest in sophisticated prevention and response methods to protect themselves.”

Experian Global Data Breach Resolution offers international resources for companies impacted by a security incident and services include IdentityWorks^SM Global, multilingual call centers, and notifications covering more than 100 countries. Experian has also recently expanded capabilities to Japan, Taiwan and Thailand.

To learn more about Experian Global Data Breach Resolution, go to https://www.experian.com/business/solutions/fraud-management/global-data-breach-services.

About Experian

Experian is the world’s leading global information services company. During life’s big moments – from buying a home or a car, to sending a child to college, to growing a business by connecting with new customers – we empower consumers and our clients to manage their data with confidence. We help individuals to take financial control and access financial services, businesses to make smarter decisions and thrive, lenders to lend more responsibly, and organisations to prevent identity fraud and crime.

We have 22,000 people operating across 32 countries and every day we’re investing in new technologies, talented people, and innovation to help all our clients maximise every opportunity. With corporate headquarters in Dublin, Ireland, we are listed on the London Stock Exchange (EXPN) and are a constituent of the FTSE 100 Index.

Learn more at www.experianplc.com or visit our global content hub at our global news blog for the latest news and insights from the Group.