Back in May, fellow Apex editor Greg Tavarez covered New York City-centric cybersecurity news; specifically, how a hacker emerged from the dark web with serious claims. This person alleged that they’d “come into possession” (i.e. stolen, let’s be real here) of a trove of highly sensitive information supposedly pilfered from a city government agency’s database. Immediately, law enforcement officials launched an investigation into a.) the legitimacy of the hacker’s actions, and b.) the potential of further vulnerabilities within city government computer systems. (Read Tavarez’s full scoop here.)

The article highlights several dire concerns; that much is clear. What remains unclear, however, is the city’s general levels of cybersecurity preparedness. Tavarez wrote how, in the wake of this incident, “some experts have criticized the city's response plan and argued that it lacks transparency and may not be adequate to address the evolving threats in the digital age.” These lessons should’ve, in theory, offered valuable lessons; namely, about reliance on outdated systems, the need to beef up cyber infrastructure investments, etc.

In that vein, we have a few new insights to share:

According to a recent study conducted by Kiteworks (i.e. shared just yesterday morning), New York still remains the second most at-risk state for cyberattacks, with a risk score of a whopping 7.84 out of 10. Granted, ranking systems of course function a bit differently from one another, but close to an 8 out of 10 is a pretty universal sign of “This must be addressed. Now.”

New York is ranked fourth in terms of largest population estimates in the nation, it doesn’t bode well that New York is still seeing significant increases in cybercrime. Per Homeland Security Today, the state’s growing population (coupled with the high concentration of targetable businesses) “make it a prime target for today’s cybercriminals.” Businesses are encouraged to adopt “a content-defined, zero trust approach to secure their data and communications.” Consolidating email, file sharing (i.e. Secure File Transfer Protocol, or SFTP), web forms and more into a private network of content protected by provenly hardened security measures, organizations are more likely to keep access to sensitive content out of unauthorized users’ hands. Staying apprised of the latest in regulatory compliance and comprehensive governance musts is very much, well, a must-do in today’s world.

“Our study reveals a concerning trend – cyberattacks in New York are on the rise, both in frequency and financial impact.” Stated Patrick Spencer, a spokesperson from Kiteworks. “Proactive investment in advanced security technologies and employee training can significantly enhance a company’s resilience against cybercrime, as well as a greater focus on data security overall.”

The long-story-short version of this, readers?

Stay safe. Double-check what securities are in place, and what new avenues have yet to be explored. As Tavarez wrote earlier this summer, “residents of New York City in particular should practice forming safer online habits and remain cautious when encountering suspicious links and email attachments,” and so on.

National conversations about cybersecurity preparedness are already happening. Future contributions to threats thwarted (as opposed to threats left unchecked) must be made a reality.