Post by Ground Labs

Customer loyalty data is not "low risk." Organizations often overlook marketing-related information as sensitive data. While there may be a grey area in some jurisdictions when it comes to B2B contact information, for B2C organizations it's clear. Customer membership and loyalty programmes include purchase patterns and behavioural insights that can give away highly sensitive information about an individual. This is what makes loyalty data valuable to the business. It's also what makes it valuable to attackers. For many organizations, the challenge is in managing the sprawl of this data as it is propagated across company systems. This data is often duplicated across CRM platforms, marketing tools, analytics environments, spreadsheets, exports and third-party systems, making it harder to know where it exists. When an incident occurs, that visibility matters. Teams need to quickly understand what data is involved, where similar data exists and how to prioritize remediation. Source article in comments.