--- title: BLOG | Data Security (8) description: Data Security | Industry news and insights on Information Technology in the Boston Cambridge area, specifically for small and medium business enterprises. Supported by Focus Technology Solutions IT Consulting Firm Boston, MA. (8) --- ![blog-and-news-banner](https://info.focustsi.com/hubfs/blog-and-news-banner.jpg "blog-and-news-banner") ## [WikiLeaks Archives 2014 Sony Data Breach Contents](https://info.focustsi.com/it-services-boston/topic/data-security/wikileaks-archives-2014-sony-data-breach-contents) Posted by [Philip Tang](https://info.focustsi.com/it-services-boston/author/philip-tang) on Fri, Apr 17, 2015 ![WikiLeaks is determined to maintain the public status of the leaked Sony documents and emails](https://info.focustsi.com/hubfs/Sony_WikiLeaks_Archive.png "WikiLeaks is determined to maintain the public status of the leaked Sony documents and emails") Julian Assange and WikiLeaks have decided to publish an archive of 200,000 confidential Sony emails and documents leaked by a data breach at the end of 2014. Last November, Sony Pictures Entertainment (SPE) suffered a massive data breach at the hands of a hacker group calling themselves "Guardians of Peace." U.S. intelligence officials suspected the group to be linked to the North Korean government, but North Korea denied responsibility.   [Read More](https://info.focustsi.com/it-services-boston/topic/data-security/wikileaks-archives-2014-sony-data-breach-contents) 0 Comments [Click here to read/write comments](https://info.focustsi.com/it-services-boston/topic/data-security/wikileaks-archives-2014-sony-data-breach-contents#comments-listing) Topics: [Data Security](https://info.focustsi.com/it-services-boston/topic/data-security) - [Tweet](https://twitter.com/share) ## [Windows Server 2003 Microsoft support ends soon](https://info.focustsi.com/it-services-boston/topic/managed-services/windows-server-2003-microsoft-support-ends-soon) Posted by [Cathie Briggette](https://info.focustsi.com/it-services-boston/author/cathie-briggette) on Tue, Mar 31, 2015 # Windows Server 2003 Operating System Support Ends July 14, 2015 ![Windows 2003 Small Business Server](https://info.focustsi.com/hs-fs/file-1155350894-jpg/social-suggested-images/windows_small_business_server-resized-600-2.jpg "Windows 2003 Small Business Server")As of July 2014, there were 12 million physical servers worldwide still running Windows Server 2003.  According to [Redmond Magazine](http://redmondmag.com/).  And 9.4 million of those instances are in North America.  [Read More](https://info.focustsi.com/it-services-boston/topic/managed-services/windows-server-2003-microsoft-support-ends-soon) 0 Comments [Click here to read/write comments](https://info.focustsi.com/it-services-boston/topic/managed-services/windows-server-2003-microsoft-support-ends-soon#comments-listing) Topics: [Microsoft](https://info.focustsi.com/it-services-boston/topic/microsoft), [Data Security](https://info.focustsi.com/it-services-boston/topic/data-security), [Windows Server](https://info.focustsi.com/it-services-boston/topic/windows-server) - [Tweet](https://twitter.com/share) ## [Security Assessment vs. Security Audit](https://info.focustsi.com/it-services-boston/it-services-boston/topic/data-security/security-assessment-vs-security-audit) Posted by [Michael Lupacchino](https://info.focustsi.com/it-services-boston/author/michael-lupacchino) on Tue, Mar 31, 2015 # What Is The Difference Between A Security Assessment And A Security Audit?   [Read More](https://info.focustsi.com/it-services-boston/it-services-boston/topic/data-security/security-assessment-vs-security-audit) 0 Comments [Click here to read/write comments](https://info.focustsi.com/it-services-boston/it-services-boston/topic/data-security/security-assessment-vs-security-audit#comments-listing) Topics: [Disaster Recovery](https://info.focustsi.com/it-services-boston/topic/disaster-recovery), [Data Security](https://info.focustsi.com/it-services-boston/topic/data-security) - [Tweet](https://twitter.com/share) ## [Enhancing Password Security in Light of Data Breaches](https://info.focustsi.com/it-services-boston/topic/data-security/enhancing-password-security-in-light-of-data-breaches) Posted by [Philip Tang](https://info.focustsi.com/it-services-boston/author/philip-tang) on Fri, Mar 27, 2015   Severe data breaches suffered by Sony, Anthem and other companies over the last year further solidify the [importance of data security](http://blog.nskinc.com/IT-Services-Boston/bid/104703/A-Security-Breach-of-Personal-Data-is-Costly-For-You-And-Your-Clients). Large companies continue to endure targeted attacks.  Earlier this week, Twitch.tv [publicly announced](http://blog.twitch.tv/2015/03/important-notice-about-your-twitch-account/) they had fallen victim to a data breach that possibly endangered users' personal account information. So what makes this breach a big deal?  If you haven't heard of Twitch before, here's what they're about: "Twitch is the largest live video platform and community for gamers with more than 100 million visitors per month. We want to connect gamers around the world by allowing them to broadcast, watch, and chat from everywhere they play." A year ago, the* Wall Street Journal* published an article analyzing U.S. Internet traffic with data from DeepField.com.  They found Twitch.tv to account for 1.8% of American peak traffic, ranking fourth overall and impressingly beating out companies such as Amazon and even Facebook.  Only three titans saw more traffic than Twitch: Netflix, Google and Apple. ![Twitch's rapid ascent has led it to becoming a major player among internet traffic](https://info.focustsi.com/hs-fs/hub/62040/file-2668953862.jpg "Twitch's rapid ascent has led it to becoming a major player among internet traffic") At the time, Twitch's Vice President of Marketing Matthew DiPietro said the site "is the central hub for the entire video game industry to share their passion for games." And hackers have breached this massive hub.  A hub that has undoubtedly grown even larger in the past year. Fortunately, Twitch responded to the attack by providing disclosure to its users.  It dispatched emails detailing the information that hackers may have obtained: ![Twitch has disclosed all the user information that hackers may have gained access to in the security breach](https://info.focustsi.com/hs-fs/hub/62040/file-2678961148.png "Twitch has disclosed all the user information that hackers may have gained access to in the security breach") Well, at least credit card information isn't on there.  Consolation prize acquired! In addition to the email, Twitch took action.  For the sake of protecting people's personal data, every Twitch account was forced to undergo a password reset henceforth.  Not only would everyone have to make a new password, but that password would have to be actually *strong, *determined by their revamped algorithmic rating system.  Otherwise, it would not be accepted. Essentially, Twitch offered some basic, but eternally useful guidelines on enhancing password security. They used a range of ranked examples to illustrate their point. ![A complicated password is the best password. Even if it's hardly coherent.](https://info.focustsi.com/hs-fs/hub/62040/file-2651331946.png "A complicated password is the best password. Even if it's hardly coherent.") The more random a password is, the more effective it becomes.  However, it's a little painful to use symbols and non-letters (!, @, $, etc.) in a password, isn't it?  Passwords are something you often type out manually, and perhaps even from memory.  Symbols don't quite lend to making that process convenient. But as Twitch recommends, the most secure form of password security may lie within a password manager and random password generator, although they don't recommend any. Effective password managers tend to be gated by a paywall.  However, [LastPass](https://lastpass.com/) sports a beginner-friendly free version with enough features to help you feel safe, including two factor authentifcation and security alerts (but mobile access comes with a fee).  [KeePass](http://keepass.com/) is completely free and is even open source, but lacks some features and demands user customization to be truly effective. Lifehacker produced [a helpful chart](http://lifehacker.com/lifehacker-faceoff-the-best-password-managers-compare-1682443320) that can help you determine which manager would suit you best: [![Which password manager would most effectively fit you needs?](http://i.kinja-img.com/gawker-media/image/upload/dhxruktuggr1hkjl6n6i.jpg "Which password manager would most effectively fit you needs?")](http://i.kinja-img.com/gawker-media/image/upload/dhxruktuggr1hkjl6n6i.jpg) Ultimately, the wisest course of action is to swiftly change your password to a site when it reveals it has been breached.  Change your passwords used on other sites, too, if they are similar to the one from the compromised site. Password managers will help to facilitate this process. [Read More](https://info.focustsi.com/it-services-boston/topic/data-security/enhancing-password-security-in-light-of-data-breaches) 0 Comments [Click here to read/write comments](https://info.focustsi.com/it-services-boston/topic/data-security/enhancing-password-security-in-light-of-data-breaches#comments-listing) Topics: [Data Security](https://info.focustsi.com/it-services-boston/topic/data-security) - [Tweet](https://twitter.com/share) ## [Identifying and Responding to Social Engineering Hackers](https://info.focustsi.com/it-services-boston/topic/data-security/identifying-and-responding-to-social-engineering-hackers) Posted by [Philip Tang](https://info.focustsi.com/it-services-boston/author/philip-tang) on Fri, Mar 20, 2015 ![Knowing how to identify social engineering hackers can help prevent them from manipulating victims and accessing their computers](https://info.focustsi.com/hs-fs/hub/62040/file-2642887443.png "Knowing how to identify social engineering hackers can help prevent them from manipulating victims and accessing their computers") Spreading [malware such as CryptoLocker](http://preview.hs-sites.com/_hcms/preview/content/2586149569?portalId=62040&_preview=true&preview_key=C4atYKi3&__hstc=20629287.1f339b6cf9e9b91abfb17bde9dda6564.1422980519268.1426863029016.1426864933279.90&__hssc=20629287.7.1426864933279&__hsfp=131876773) is the cowardly, distant method for breaching a victim's data security and extorting money out of them.  By comparison, [social engineering](http://blog.nskinc.com/it-services-boston/social-engineering-and-hacker-attacks?utm_campaign=Secure%20IT%20Systems&utm_content=13028601&utm_medium=social&utm_source=twitter) is the method a bold-faced, audacious hacker will employ.  It often involves the hacker directly tricking the victim via a manipulative phone call conversation.   [Read More](https://info.focustsi.com/it-services-boston/topic/data-security/identifying-and-responding-to-social-engineering-hackers) 0 Comments [Click here to read/write comments](https://info.focustsi.com/it-services-boston/topic/data-security/identifying-and-responding-to-social-engineering-hackers#comments-listing) Topics: [Data Security](https://info.focustsi.com/it-services-boston/topic/data-security) - [Tweet](https://twitter.com/share) | [Previous](https://info.focustsi.com/it-services-boston/topic/data-security/page/7) | [Next](https://info.focustsi.com/it-services-boston/topic/data-security/page/9) | | --- | --- |