3 Real Threats to Your PR Database

Jan 24, 2019 | Data, Security, Social Media

Featured article by Calvin Paige, Independent Technology Author

Successful PR and marketing activities largely depend on a company’s ability to both develop and maintain valuable relationships in an industry, both personally and digitally. To do so, a company must appear to be reliable and trustworthy.

As you will need to store a substantial amount of contact and biographical information, your business will have a responsibility to safeguard the sensitive data effectively. Here are three real threats to your PR database.

1. GDPR Compliance

The General Data Protection Regulation (GDPR) came into effect on May 28th, 2018, with the aim of changing how businesses manage data that belongs to both customers and prospects within the EU. If your business includes public relations, you need to consider how GDPR will affect the data you hold about journalists, bloggers, influencers, etc.

For example, to be compliant, you will need to:

– Prove consent
– Publish a data protection policy (explain the information you hold, what you do with it and how you share it)
– Ensure internal security processes are up to standard
– Ensure your suppliers are compliant
– Educate your team on the importance of GDPR compliance

If your business fails to comply with GDPR, you could face a penalty for non-compliance, which has a maximum fine of either 2% of your annual global turnover or €10 million, whichever is higher. A serious data breach could potentially double the maximum fine.

2. Malware

As public relation agencies, media firms and internal marketing departments will store a considerable amount of journalistic data, they are becoming a target for intelligent cybercriminals.

Recent reports have found that a Chinese Cyberthreat group, known as “admin@338” has been targeting various media organizations. It’s believed the group sends spear phishing emails about newsworthy stories to various newspapers, television and radio outlets, which feature malicious attachments.

As PR firms and departments will store a significant amount of information, a successful cyberattack could provide hackers with in-depth intelligence. Unfortunately, if your business does not integrate the best security software solutions into its operations, they could become a cybercriminal’s next victim. Learn how to protect your PR database by reviewing these dependable security awareness resources.

3. Human Error

While cyberattacks and a lack of GDPR compliance can lead to serious financial and legal repercussions, human error could also pose a big threat to your PR data.

According to a Data Security Incident Response Report, 37% of data breaches were traced back to human error. Incidents reported include:

– Employee theft
– External device theft
– Malware scams

Unfortunately, a loss of critical data can lead to a poor reputation, as well as financial and legal repercussions for your business.

There are, however, ways to prevent data loss, as you should:

– Educate your team about data security and its risks
– Keep track of portable storage (company laptops, smartphones, USBs, hard drives, etc.)
– Simulate phishing attacks during training
– Strengthen all company passwords (unique phrases with characters and symbols, two-factor authentication, etc.)
– Change passwords frequently
– Encrypt data

As your PR database will help to power your business operations each day, you cannot afford to neglect its security. It’s imperative to consider the above risks and solutions when building a powerful database of journalists, influencers, editors, and bloggers.

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more
Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more