A Veil of Secrecy Aids Surge in Cyber-Attacks in Asia
L33tdawg: This HITB GSEC session by folks from Citizen Lab and VXRL will hopefully shed some light: http://gsec.hitb.org/sg2015/sessions/session-014/
Once a month, cybersecurity lawyer Paul Haswell gets a call from an Asian company with the same question: We’ve been hacked. Who do we need to tell?
More often than not, his answer is “no one.” The client will hang up before Haswell can urge them to go public anyway.
“There’s no uniformity across Asia -- some countries don’t even have a law,” said Haswell, a Hong Kong-based partner at Pinsent Masons. “In Mainland China, security is the lowest priority.” In an era where more and more data is stored online and attacks are discovered with alarming regularity, the lack of reporting mechanisms means there’s no telling how often or how much personal information is taken from databases in Asia.
