A mid-sized law firm accidentally exposed sensitive data belonging to multiple clients. Despite their SharePoint being secured according to Microsoft's recommended standards by their MSP, an oversight occurred. Client folders were organized within a central customer library, and lawyers were instructed to share specific folders with clients using secure, time-limited links.
Under pressure to meet deadlines and responding to client access issues, a senior lawyer mistakenly shared the entire root customer directory instead of a single folder. Although INSIGHT detected this unauthorized sharing and issued alerts, the IT staff were on leave and had not set up backup monitoring for such critical notifications.
The client quickly realized they had access to other clients' confidential information and confronted the lawyer, expressing serious concerns about the firm's data security practices and threatening to withdraw their business.
In response to this breach, the firm reconfigured INSIGHT to send high-priority alerts directly to both IT personnel and the individual users responsible for risky actions. This proactive measure has significantly reduced incident detection and response times, strengthening the firm's overall data security and client trust.
Get a Data Security Assessment
We Guarantee Results, through
our 3 week Risk Assessment
process.
If we don’t find any serious cyber risks or incidents, we’ll refund your investment.
When confronted by the IT team, the employee initially claimed to have returned the company USB, unaware that INSIGHT had logged his use of a personal USB as well.
SharePoint Malicious mass downloads from Sensitive Folder to user’s personal
device.
INSIGHT flagged this suspicious activity, and an investigation confirmed that the data had indeed been transferred.
SharePoint Exposure of Customer Data by Law firm – Human Error
In response to this breach, the firm reconfigured INSIGHT to send high-priority alerts directly to both IT personnel and the individual users responsible for risky actions.
Stored Passwords detected by INSIGHT by Company’s MSP having admin rights.
GuardWare INSIGHT’s data discovery scan detected the stored password file, prompting immediate deletion.
Scans revealed stored Customer data including bank account info in AWS DevOPs environment.
GuardWare ASSESSOR revealed stored customer data in log files on developers’ devices and in their AWS environment, as well as the unsafe sharing practices.
Outsource Developers of a financial institution detected exposing Financial APPs source code and company’s IP.
With INSIGHT, they can safely re-enable forum access, confident that any unauthorized source code postings will be promptly detected and addressed.
Productivity Monitoring WFH compared with Office
To address these concerns, the company deployed GuardWare INSIGHT’s productivity monitoring features to track work behaviors accurately.
Rogue Network
Security discovered that an employee had used system roll-back during this period, in an attempt to remove the GuardWare INSIGHT Agent from the system.
Dangers of using Cloud Storage Services and Website Transfers
GuardWare INSIGHT monitors and prevent unauthorized file uploads across cloud, web, email, and chat applications, ensuring their data stays secure and compliant.
Corporate Email Risk - Email forward to user’s Personal Email resulted in serious theft of sensitive PII data
GuardWare INSIGHT flagged the incident. The software’s AI detected the email forward to a personal account and scanned the attached file, identifying the sensitive content.
WFH Risks including VPN misuse
investigation with GuardWare INSIGHT revealed that users were frequently turning the VPN on and off. The university adjusted the configuration to ensure the VPN remains active at all times.
Malicious Insider in a Recruitment Firm – Data exfil by a Director
GuardWare INSIGHT showed that the data exfiltration occurred while the user was connected to the company’s Wi-Fi, proving the laptop was in his possession at the time.