SUNNYVALE, CA--(Marketwire - August 10, 2009) - In its sixth annual study (http://www.proofpoint.com/outbound) of outbound email and data loss prevention issues, Proofpoint, Inc. found that US companies are increasingly concerned about a growing number of data leaks caused by employee misuse of email, blogs, social networks, multimedia channels and even text messages.

According to the June 2009 study of 220 email decision makers at US companies with more than 1000 employees, organizations continue to embrace preventative measures -- some more drastic than others.

Who's Reading Your Corporate Email?

For example, as more US companies reported their business was impacted by the exposure of sensitive or embarrassing information (34 percent, up from 23 percent in 2008), an increasing number say they employ staff to read or otherwise analyze the contents of outbound email (38 percent, up from 29 percent in 2008). The pain of data leakage has become so acute in 2009 that more US companies report they employ staff whose primary or exclusive job is to monitor the content of outbound email (33 percent, up from 15 percent in 2008).

In addition, companies are regularly ordered to produce employee email as part of legal actions, exposing its contents to outside scrutiny. Nearly a quarter (24 percent) of large US companies report that employee email was subpoenaed in the past 12 months.

Draconian Measures?

When US companies investigated the exposure of confidential, sensitive or private information via email, blogs, multimedia channels, and/or social networks, the end result for the offending employee was generally very bad news:

--  Email still the #1 threat: 43 percent of US companies surveyed had
    investigated an email-based leak of confidential or proprietary information
    in the past 12 months. Nearly a third of them, 31 percent, terminated an
    employee for violating email policies in the same period (up from 26
    percent in 2008).
    
--  Blogs breaches continue: 18 percent had investigated a data loss event
    via a blog or message board in the past 12 months. 17 percent disciplined
    an employee for violating blog or message board policies, while nearly nine
    percent reported terminating an employee for such a violation (both
    increases from 2008, 11 percent and six percent, respectively).
    
--  Video exposure: Given the rapid adoption of video and audio media
    within the enterprise -- and the popularity of media sharing sites like
    YouTube -- it's no surprise that more US companies reported investigating
    exposure events across these channels (18 percent, up from 12 percent in
    2008). As a result, 15 percent have disciplined an employee for violating
    multimedia sharing / posting policies in the past 12 months, while eight
    percent reported terminating an employee for such a violation.
    
--  Friends or foes?: Concerning social networks, US companies are also
    experiencing more exposure incidents involving sites like Facebook and
    LinkedIn as compared to 2008 (17 percent versus 12 percent). US companies
    are taking a much more forceful approach with offending employees -- eight
    percent reported terminating an employee for such a violation as compared
    to only four percent in 2008.
    
--  Data loss in 140 characters or less: Even short message services like
    SMS texts and Twitter pose a risk. 13 percent of US companies investigated
    an exposure event involving mobile or Web-based short message services in
    the past 12 months.
    

Economic Enemy

As the global economic recession forced many US companies to downsize and reduce spending, the results of Proofpoint's survey show that those actions have often put them at greater risk for several reasons:

--  18 percent of US companies investigated a suspected leak or theft of
    confidential or proprietary information associated with an employee leaving
    the company (e.g., through voluntary or involuntary termination) in the
    past 12 months.
    
--  42 percent of respondents say that increasing numbers of layoffs at
    their organizations in the past 12 months have created an increased risk of
    data leakage. 47 percent of respondents report that layoffs of IT staff
    have negatively impacted their organization's ability to protect
    confidential, proprietary and sensitive information in the past 12 months.
    
--  50 percent of respondents say that budget constraints have negatively
    impacted their organization's ability to protect confidential, proprietary
    or sensitive information in the past 12 months.
    

Downloads

--  To download a free copy of Proofpoint's complete report, Outbound
    Email and Data Loss Prevention in Today's Enterprise, 2009, visit:
    http://www.proofpoint.com/outbound/.
    

Live Webinar: Findings from Proofpoint's 2009 Research

Join Proofpoint on Wednesday, August 12, 2009 at 2 p.m. ET / 11 a.m. PT for a live webinar where Keith Crosley, director of market development for Proofpoint, and analyst Michael Osterman, principal of Osterman Research, will discuss findings from the Outbound Email and Data Loss Prevention in Today's Enterprise report. To register, please visit: http://www.proofpoint.com/outbound0809.

About Proofpoint, Inc.

Proofpoint secures and improves enterprise email infrastructure with solutions for email security, archiving, encryption and data loss prevention. Proofpoint solutions defend against spam and viruses, prevent leaks of confidential and private information, encrypt sensitive emails and archive messages for retention, e-discovery and easier mailbox management. Proofpoint solutions can be deployed on-demand (SaaS), on-premises (appliance), or in a hybrid architecture for maximum flexibility and scalability. For more information, please visit http://www.proofpoint.com.

Proofpoint is a trademark or registered trademark of Proofpoint, Inc. in the US and other countries. All other trademarks contained herein are the property of their respective owners.

Technorati: Proofpoint   Email and Data Loss Prevention   Email Security