Today, we often focus on cyber security threats to our organisations like phishing, malware, and ransomware. However, physical security vulnerabilities can be just as dangerous and are frequently overlooked. This article discusses how physical vulnerabilities can lead to data breaches, financial losses, and severe reputational damage. We examine some common physical security risks, real-world examples, and practical steps organisations and individuals can take to mitigate these threats.
Workplace Tailgating
One of the most common physical security vulnerabilities is tailgating or piggybacking, where an unauthorised person follows an authorised individual into a secure area. This can happen when a staff member holds the door open for someone without verifying their identity. A similar technique is where an attacker poses as a parcel delivery driver or courier to gain access to a building.
In the early days of Facebook, Mark Zuckerberg is said to have managed to secure crucial funding by tailgating into a major investment firm’s office. Dressed in a suit and tie, he convinced the security guard that he had an appointment with a high-ranking executive, gaining unauthorised access. This bold move allowed him to pitch Facebook’s rapid growth to potential investors, ultimately securing the necessary funding to expand the company. However, Zuckerberg has never confirmed the veracity of the story. This incident underscores the dangers of tailgating and the importance of strict access control measures in the workplace.
Printers and Data Security
Another significant risk is leaving sensitive documents on printers. It’s easy to forget about a document sent to the printer, but this oversight can have serious consequences.
At a large telecommunications company in Plano, Texas, a security consultant accidentally discovered a critical security lapse. While retrieving an inventory sheet from a shared printer, the consultant found a printed email from the company’s Vice President. The email contained sensitive information about the impending shutdown of the Plano office, resulting in widespread redundancies.
This incident underscores the importance of promptly collecting printed documents to prevent unauthorised access to confidential information, which could lead to significant organisational and employee impact. Organisations should implement secure printing solutions that require users to authenticate before printing their documents.1
Passwords
Passwords written on Post-it notes and left in plain sight are another common vulnerability. This practice can lead to unauthorised access to systems and data. In a notable case, a security analyst named Aaron Motta exploited poor password management practices to steal nearly $600,000 in cryptocurrency from a client.
The client had carelessly left their account passwords on sticky notes, making them easily accessible. Motta used these passwords to gain access to the client’s Trezor crypto hardware wallet and transfer the funds. This incident underscores the critical importance of secure password management and the dangers of leaving sensitive information in plain sight, serving as a cautionary tale for individuals and organisations alike.2
Physical Loss or Theft
Unattended laptops pose a significant risk as well. In 2017, West Virginia-based Coplin Health Systems experienced the theft of an unencrypted laptop from an employee’s car. The laptop, which contained sensitive information such as patient names, Social Security numbers, financial details, addresses, dates of birth, and medical data, was password-protected but lacked encryption.
This breach affected approximately 43,000 patients, highlighting the critical need for robust data encryption practices to protect sensitive information, especially when devices are taken off-site. To prevent such incidents, employees should be trained to never leave their devices unattended and to use encryption to protect data.3
Access Control
Unlocked doors to secure areas can also lead to unauthorised access. Alethe Denis, a senior security consultant at Bishop Fox, specialises in physical security assessments. In a recent engagement, she demonstrated the vulnerabilities of a multi-tenant building’s security.
Without any keys or badges, Denis accessed the building, found an office door propped open, bypassed a security guard, and installed a malicious device in a conference room. This device, configured with credentials found in a waste bin, allowed her team to exfiltrate data over the corporate Wi-Fi network for a week without detection. This exercise highlighted the ease with which social engineering tactics can exploit physical and network security weaknesses, emphasising the need for comprehensive security measures.4
To mitigate these risks, organisations should implement comprehensive physical security policies. This includes regular security training for employees, strict access control measures, secure printing solutions, and robust password policies. Additionally, organisations should conduct regular security audits to identify and address potential vulnerabilities.
Individuals also play a crucial role in maintaining physical security. Simple actions like verifying the identity of anyone entering a secure area, not leaving sensitive documents on printers, and never writing down passwords can significantly reduce the risk of a security breach. By staying vigilant and following best practices, both organisations and individuals can help protect sensitive information from physical security threats.
While cyber threats often dominate the headlines, physical security vulnerabilities can be just as damaging. By understanding these risks and taking proactive measures, we can better protect our data and maintain the trust of our customers and stakeholders.
Office Security Challenge
Test your knowledge of physical security vulnerabilities by taking our short quiz Office Security Challenge.
Contact Us
Contact us now to learn more about our range of cybersecurity services.
Sources:
