Data Storage & Backup Tape Security

In press releases reporting lost or stolen backup tapes, companies often state that the data on the tape is of complex and proprietary format.

Tapes lost with encrypted data do not need to be reported!

If a missing tape is officially reported, then for sure its NOT encrypted. If it is not encrypted, then the data is compromised and you should be concerned.

For more information on this topic, read our article: "6 Common Misconceptions about Compromised Backup Tapes."

Click here for more articles and whitepapers on tape related data breaches.

If you have questions about compromised backup tapes, data breaches, or encryption contact us at info@losttapes.org.

Are couriers like Iron Mountain responsible for keeping my tapes safe?
Couriers are not responsible for the data that they transport. Iron Mountain, CEO, Richard Reese - “… even Iron Mountain is not immune from human error. The only effective means to prevent unauthorized access to data is the use of encryption.“

What are the costs associated with a lost backup tape?
While the costs can vary greatly, The Ponemon Research firm reported that data breaches cost companies an average of $197 per compromised record in legal fees and other expenses.

Does data on tape needs "Special" software to be able to read it?

Data stored on tape in cleartext can be read by pretty much anyone. No special software is required. It can be read as easy as it is to recover your tape backup.

We lost a backup tape, but it was returned to us. Do we need to report the incident?

Since there's no audit trail on tapes, there's no way you can determine if you're tape has been compromised. A thief could have easily copied your tape and returned it back to you without your knowledge. Because of this, the incident must be reported.

We are thinking about encrypting our backup tapes. Will this add time to our current backup procedures?

Encryption doesn't always have to affect your network and backup procedures. Hardware encryption devices typically have little to your backup procedures and can be very easy to setup. Be sure to evaluate all of your options before making a decision about what solution is the right fit for you. Request a demo of the solution prior to purchase... many companies provide these free of charge.