{"id":2560,"date":"2021-12-03T11:39:16","date_gmt":"2021-12-03T17:39:16","guid":{"rendered":"https:\/\/staging2.idsinc.com\/case-studies\/maintaining-electronically-stored-information-copy\/"},"modified":"2022-12-07T14:11:15","modified_gmt":"2022-12-07T20:11:15","slug":"verdacht-auf-datenschutzverletzung","status":"publish","type":"page","link":"https:\/\/idsinc.com\/de\/case-studies\/suspected-data-breach\/","title":{"rendered":"Verdacht auf Datenverletzung \u2013 Bestimmung, auf welche Daten zugegriffen wurde, um zu entscheiden, ob eine Meldung erforderlich war"},"content":{"rendered":"\n
\n
\n
\n
\n \n
\n
\n \"Verdacht \n <\/div>\n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n
\n
\n
\n \n
\n

\n \n HERAUSFORDERUNG <\/span>\n\n \n \n <\/span>\n <\/h1>\n<\/div>\n\n\n
\n
\n
\n
\n
\n
Der Kunde von iDS glaubte, dass er Opfer einer Datenschutzverletzung geworden sein k\u00f6nnte.<\/h5>\n

Bei einer vermuteten Datenschutzverletzung musste der Kunde verstehen, welche Meldepflicht er gegebenenfalls hat. In Zusammenarbeit mit ihren externen Anw\u00e4lten wurden wir gebeten, Meinungen zur Kompromittierung von Systemen, falls vorhanden, und zu den Daten, auf die zugegriffen wurde, abzugeben.<\/p>\n

Zuallererst musste unser Kunde feststellen, ob es tats\u00e4chlich eine Datenschutzverletzung gegeben hatte. Das erforderte eine Stellungnahme zur Kompromittierung von Systemen und eine Feststellung bez\u00fcglich des Zugriffs auf Daten. Insbesondere verlie\u00df sich der Kunde auf unsere Expertise f\u00fcr Folgendes:<\/p>\n

    \n
  • Verstehen und Identifizieren des Aufzeichnungssystems, um die erforderlichen Systeme, Daten und Protokolle zur \u00dcberpr\u00fcfung zu erhalten<\/li>\n
  • Ermittlung, inwiefern Verschl\u00fcsselung beim Schutz von Daten eine Rolle gespielt haben k\u00f6nnte<\/li>\n
  • Verstehen, Erkl\u00e4ren und Analysieren der verschiedenen M\u00f6glichkeiten zum Exfiltrieren von Daten<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div> <\/div>\n<\/div>\n\n
    \n

    \n \n L\u00f6sung <\/span>\n\n \n \n <\/span>\n <\/h1>\n<\/div>\n\n\n
    \n
    \n
    \n
    \n
    \n
    Unser forensisches Team analysierte Computer, Intrusion Detection-Protokolle, Router-Protokolle und andere systembezogene Protokolle, um festzustellen, ob ein Versto\u00df aufgetreten ist.<\/h5>\n

    Das Forensik- und Ermittlungsteam von iDS f\u00fchrte seine Analyse durch und berichtete \u00fcber Folgendes:<\/p>\n

      \n
    • Der Eindringling hatte sehr eingeschr\u00e4nkten Zugriff auf die betroffenen Systeme<\/li>\n
    • Die Aktivit\u00e4t war innerhalb weniger Stunden nach der Einreise identifiziert worden<\/li>\n
    • Es wurden keine tats\u00e4chlichen Daten exfiltriert<\/li>\n
    • In Bezug auf den \u201eZugriff\u201c wurden die vom Eindringling besuchten Bereiche verschl\u00fcsselt<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div> <\/div>\n<\/div>\n\n
      \n

      \n \n Ergebnis <\/span>\n\n \n \n <\/span>\n <\/h1>\n<\/div>\n\n\n
      \n
      \n
      \n
      \n
      \n
      iDS konnte nachweisen, dass zwar ein unbefugter Zugriff auf das Netzwerk stattgefunden hat, aber keine Exfiltration stattgefunden hat und auf keine sichtbaren Daten zugegriffen wurde.\u00a0<\/h5>\n

      Unser Kunde war sich sicher, dass es zwar zu einem unbefugten Netzwerkzugriff gekommen war, aber keine Exfiltration stattfand und auf keine sichtbaren Daten zugegriffen wurde. Dementsprechend wurde von externen Anw\u00e4lten festgestellt, dass keine Meldung erforderlich war.<\/p>\n<\/div>\n<\/div>\n<\/div> <\/div>\n<\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n","protected":false},"excerpt":{"rendered":"

      iDS\u2019s client believed that they might have been the victim of a data breach. In a suspected data breach, the client needed to understand what reporting obligation, if any, they may have. Working with their outside counsel, we were asked to provide opinions on the compromise of systems, if any, and what data had been […]<\/p>\n","protected":false},"author":7,"featured_media":2490,"parent":33,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"team":[],"class_list":["post-2560","page","type-page","status-publish","has-post-thumbnail","hentry","has-post-title","has-post-date","has-post-category","has-post-tag","has-post-comment","has-post-author",""],"yoast_head":"\nSuspected Data Breach - iDiscovery Solutions<\/title>\n<meta name=\"description\" content=\"After a Suspected Data Breach, iDiscovery Solutions Determined What Data Was Accessed to Decide Whether Reporting Was Necessary.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/idsinc.com\/de\/fallstudien\/verdacht-auf-datenschutzverletzung\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Suspected Data Breach - Determining What Data Was Accessed to Decide Whether Reporting Was Necessary\" \/>\n<meta property=\"og:description\" content=\"After a Suspected Data Breach, iDiscovery Solutions Determined What Data Was Accessed to Decide Whether Reporting Was Necessary.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/idsinc.com\/de\/fallstudien\/verdacht-auf-datenschutzverletzung\/\" \/>\n<meta property=\"og:site_name\" content=\"iDiscovery Solutions\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/iDiscovery-Solutions-110210573904472\" \/>\n<meta property=\"article:modified_time\" content=\"2022-12-07T20:11:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/idsinc.com\/wp-content\/uploads\/2021\/12\/iDS-CaseStudyImages-202114-reportingwasnecessary.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2500\" \/>\n\t<meta property=\"og:image:height\" content=\"1250\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/idsinc.com\\\/case-studies\\\/suspected-data-breach\\\/\",\"url\":\"https:\\\/\\\/idsinc.com\\\/case-studies\\\/suspected-data-breach\\\/\",\"name\":\"Suspected Data Breach - iDiscovery Solutions\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/idsinc.com\\\/en_gb\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/idsinc.com\\\/case-studies\\\/suspected-data-breach\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/idsinc.com\\\/case-studies\\\/suspected-data-breach\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/idsinc.com\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/iDS-CaseStudyImages-202114-reportingwasnecessary.jpg\",\"datePublished\":\"2021-12-03T17:39:16+00:00\",\"dateModified\":\"2022-12-07T20:11:15+00:00\",\"description\":\"After a Suspected Data Breach, iDiscovery Solutions Determined What Data Was Accessed to Decide Whether Reporting Was Necessary.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/idsinc.com\\\/case-studies\\\/suspected-data-breach\\\/#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/idsinc.com\\\/case-studies\\\/suspected-data-breach\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/idsinc.com\\\/case-studies\\\/suspected-data-breach\\\/#primaryimage\",\"url\":\"https:\\\/\\\/idsinc.com\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/iDS-CaseStudyImages-202114-reportingwasnecessary.jpg\",\"contentUrl\":\"https:\\\/\\\/idsinc.com\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/iDS-CaseStudyImages-202114-reportingwasnecessary.jpg\",\"width\":2500,\"height\":1250},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/idsinc.com\\\/case-studies\\\/suspected-data-breach\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/idsinc.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Case Studies\",\"item\":\"https:\\\/\\\/idsinc.com\\\/case-studies\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Suspected Data Breach – Determining What Data Was Accessed to Decide Whether Reporting Was Necessary\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/idsinc.com\\\/en_gb\\\/#website\",\"url\":\"https:\\\/\\\/idsinc.com\\\/en_gb\\\/\",\"name\":\"iDiscovery Solutions\",\"description\":\"Use data to your advantage in the courtroom\",\"publisher\":{\"@id\":\"https:\\\/\\\/idsinc.com\\\/en_gb\\\/#organization\"},\"alternateName\":\"iDS\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/idsinc.com\\\/en_gb\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/idsinc.com\\\/en_gb\\\/#organization\",\"name\":\"iDiscovery Solutions\",\"alternateName\":\"iDS\",\"url\":\"https:\\\/\\\/idsinc.com\\\/en_gb\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/idsinc.com\\\/en_gb\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/idsinc.com\\\/wp-content\\\/uploads\\\/2021\\\/01\\\/iDS-Logo-3c-e1611176096212.png\",\"contentUrl\":\"https:\\\/\\\/idsinc.com\\\/wp-content\\\/uploads\\\/2021\\\/01\\\/iDS-Logo-3c-e1611176096212.png\",\"width\":100,\"height\":73,\"caption\":\"iDiscovery Solutions\"},\"image\":{\"@id\":\"https:\\\/\\\/idsinc.com\\\/en_gb\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/iDiscovery-Solutions-110210573904472\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/idsinc\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCarv7o1MeYfCp0eZ1IrufIw\"],\"description\":\"iDS provides consultative data solutions to corporations and law firms around the world, giving them a decisive advantage \u2013 both in and out of the courtroom. iDS\u2019s subject matter experts and data strategists specialize in finding solutions to complex data problems, ensuring data can be leveraged as an asset, not a liability.\",\"email\":\"info@idsinc.com\",\"telephone\":\"+1.800.813.4832\",\"legalName\":\"iDiscovery Solutions\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Verdacht auf Datenschutzverletzung \u2013 iDiscovery Solutions","description":"Nach einem vermuteten Datenschutzversto\u00df ermittelte iDiscovery Solutions, auf welche Daten zugegriffen wurde, um zu entscheiden, ob eine Meldung erforderlich war.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/idsinc.com\/de\/fallstudien\/verdacht-auf-datenschutzverletzung\/","og_locale":"de_DE","og_type":"article","og_title":"Suspected Data Breach - Determining What Data Was Accessed to Decide Whether Reporting Was Necessary","og_description":"After a Suspected Data Breach, iDiscovery Solutions Determined What Data Was Accessed to Decide Whether Reporting Was Necessary.","og_url":"https:\/\/idsinc.com\/de\/fallstudien\/verdacht-auf-datenschutzverletzung\/","og_site_name":"iDiscovery Solutions","article_publisher":"https:\/\/www.facebook.com\/iDiscovery-Solutions-110210573904472","article_modified_time":"2022-12-07T20:11:15+00:00","og_image":[{"width":2500,"height":1250,"url":"https:\/\/idsinc.com\/wp-content\/uploads\/2021\/12\/iDS-CaseStudyImages-202114-reportingwasnecessary.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/idsinc.com\/case-studies\/suspected-data-breach\/","url":"https:\/\/idsinc.com\/case-studies\/suspected-data-breach\/","name":"Verdacht auf Datenschutzverletzung \u2013 iDiscovery Solutions","isPartOf":{"@id":"https:\/\/idsinc.com\/en_gb\/#website"},"primaryImageOfPage":{"@id":"https:\/\/idsinc.com\/case-studies\/suspected-data-breach\/#primaryimage"},"image":{"@id":"https:\/\/idsinc.com\/case-studies\/suspected-data-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/idsinc.com\/wp-content\/uploads\/2021\/12\/iDS-CaseStudyImages-202114-reportingwasnecessary.jpg","datePublished":"2021-12-03T17:39:16+00:00","dateModified":"2022-12-07T20:11:15+00:00","description":"Nach einem vermuteten Datenschutzversto\u00df ermittelte iDiscovery Solutions, auf welche Daten zugegriffen wurde, um zu entscheiden, ob eine Meldung erforderlich war.","breadcrumb":{"@id":"https:\/\/idsinc.com\/case-studies\/suspected-data-breach\/#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/idsinc.com\/case-studies\/suspected-data-breach\/"]}]},{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/idsinc.com\/case-studies\/suspected-data-breach\/#primaryimage","url":"https:\/\/idsinc.com\/wp-content\/uploads\/2021\/12\/iDS-CaseStudyImages-202114-reportingwasnecessary.jpg","contentUrl":"https:\/\/idsinc.com\/wp-content\/uploads\/2021\/12\/iDS-CaseStudyImages-202114-reportingwasnecessary.jpg","width":2500,"height":1250},{"@type":"BreadcrumbList","@id":"https:\/\/idsinc.com\/case-studies\/suspected-data-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/idsinc.com\/"},{"@type":"ListItem","position":2,"name":"Case Studies","item":"https:\/\/idsinc.com\/case-studies\/"},{"@type":"ListItem","position":3,"name":"Suspected Data Breach – Determining What Data Was Accessed to Decide Whether Reporting Was Necessary"}]},{"@type":"WebSite","@id":"https:\/\/idsinc.com\/en_gb\/#website","url":"https:\/\/idsinc.com\/en_gb\/","name":"iDiscovery-L\u00f6sungen","description":"Nutzen Sie Daten im Gerichtssaal zu Ihrem Vorteil","publisher":{"@id":"https:\/\/idsinc.com\/en_gb\/#organization"},"alternateName":"iDS","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/idsinc.com\/en_gb\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"},{"@type":"Organization","@id":"https:\/\/idsinc.com\/en_gb\/#organization","name":"iDiscovery-L\u00f6sungen","alternateName":"iDS","url":"https:\/\/idsinc.com\/en_gb\/","logo":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/idsinc.com\/en_gb\/#\/schema\/logo\/image\/","url":"https:\/\/idsinc.com\/wp-content\/uploads\/2021\/01\/iDS-Logo-3c-e1611176096212.png","contentUrl":"https:\/\/idsinc.com\/wp-content\/uploads\/2021\/01\/iDS-Logo-3c-e1611176096212.png","width":100,"height":73,"caption":"iDiscovery Solutions"},"image":{"@id":"https:\/\/idsinc.com\/en_gb\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/iDiscovery-Solutions-110210573904472","https:\/\/www.linkedin.com\/company\/idsinc","https:\/\/www.youtube.com\/channel\/UCarv7o1MeYfCp0eZ1IrufIw"],"description":"iDS bietet Unternehmen und Anwaltskanzleien weltweit beratende Datenl\u00f6sungen und verschafft ihnen damit einen entscheidenden Vorteil \u2013 sowohl vor als auch au\u00dferhalb des Gerichtssaals. Die Fachexperten und Datenstrategen von iDS sind auf die L\u00f6sung komplexer Datenprobleme spezialisiert und stellen sicher, dass Daten als Vorteil und nicht als Belastung genutzt werden.","email":"info@idsinc.com","telephone":"+1.800.813.4832","legalName":"iDiscovery Solutions"}]}},"builder_content":"\n<h1>CHALLENGE<br\/><\/h1>\n<h5>iDS\u2019s client believed that they might have been the victim of a data breach.<\/h5> <p>In a suspected data breach, the client needed to understand what reporting obligation, if any, they may have. Working with their outside counsel, we were asked to provide opinions on the compromise of systems, if any, and what data had been accessed.<\/p> <p>First and foremost, our client needed to determine if there had, in fact, been a data breach. That required an opinion on the compromise of systems and a determination regarding the accessing of data. Specifically, the client relied on our expertise for the following:<\/p> <ul> <li>Understanding and identifying the system of records for obtaining the necessary systems, data, and logs for review<\/li> <li>Determining how encryption may have played a role in the protection of data<\/li> <li>Understanding, explaining, and analyzing the various ways to exfiltrate data<\/li> <\/ul>\n<h1>Solution<br\/><\/h1>\n<h5>Our Forensic Team analyzed computers, intrusion detection logs, router logs, and other system related logs in an effort to determine if a breach occurred.<\/h5> <p>The iDS Forensics and Investigative Team performed their analysis and reported on the following:<\/p> <ul> <li>The intruder had very limited access to the affected systems(s)<\/li> <li>The activity had been identified within a few hours of entry<\/li> <li>No actual data had been exfiltrated<\/li> <li>In terms of \u201caccess,\u201d the areas visited by the intruder were encrypted<\/li> <\/ul>\n<h1>Result<br\/><\/h1>\n<h5>iDS was able to show that while unauthorized access to the network had occurred, no exfiltration had occurred and no viewable data have been accessed.\u00a0<\/h5> <p>Our client was confident that while there had been unauthorized network access, no exfiltration occurred and no viewable data was accessed. Accordingly, it was determined by outside counsel that limited to no reporting was required.<\/p>","_links":{"self":[{"href":"https:\/\/idsinc.com\/de\/wp-json\/wp\/v2\/pages\/2560","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/idsinc.com\/de\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/idsinc.com\/de\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/idsinc.com\/de\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/idsinc.com\/de\/wp-json\/wp\/v2\/comments?post=2560"}],"version-history":[{"count":0,"href":"https:\/\/idsinc.com\/de\/wp-json\/wp\/v2\/pages\/2560\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/idsinc.com\/de\/wp-json\/wp\/v2\/pages\/33"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/idsinc.com\/de\/wp-json\/wp\/v2\/media\/2490"}],"wp:attachment":[{"href":"https:\/\/idsinc.com\/de\/wp-json\/wp\/v2\/media?parent=2560"}],"wp:term":[{"taxonomy":"team","embeddable":true,"href":"https:\/\/idsinc.com\/de\/wp-json\/wp\/v2\/team?post=2560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}