The call usually goes something like this: You’re about to go out the door to lunch, and you get a call on your cell phone from a number you don’t recognize.
“We’ve had a spear phish attack,” says the person on the line, who tells you that you’re on the emergency call list. “Somebody’s gotten access to the data warehouse. We’re not sure who and we’re not sure how much they’ve gotten.”
At that point, you’re not going back to lunch. You’re going back to your desk. You’re asking yourself whether you’ve done everything you can to protect this data. And if you’re honest, data experts believe, you will likely say no.