Web Host Security Guide: Preventing Data Breaches and Protecting Customer Data

[johny899]

Imagine receiving an email alerting you that your customers' data has been compromised. That's frightening! Considering that I've spent years working with websites and servers, and data breaches are not simply news articles, they can completely derail a business. What can web hosts do to protect our information? Let's discuss.

Why are Hackers Targeting Web Hosts?​

Web hosts are aware to a substantial amount of sensitive information: emails, passwords, payment information, and more. Hackers see this information as an opportunity for quick and easy money. Even the bigger companies have had their fair share of experience with hacks, it isn't a matter of "if," it is a matter of how prepared you are.

Strong Passwords and Two-Step Verification.​

Weak passwords are a hacker's best friend.

• Use strong, unique passwords for staff and customers.
• Enable two-step verification (2FA) wherever possible.

It may seem inconvenient, but it stops most hackers. I know from experience as I once avoided a phishing scheme because 2FA was on. It works!

Update Software​

Servers require constant management.

• Keep server software updated on the regular basis.
• Immediately install security patches.

I learned this through experience when an old WordPress site was hacked because the updates weren't installed. Just do Updates, save yourself later.

Encryption​

Think of encryption as locking your safe. You’ll want to encrypt customer data both when it is stored, and when it is being transmitted over the internet. Use SSL/TLS for your websites and encrypt the databases. Even if hackers can break-in, the information will be useless to them.

Backups and Monitoring​

Backups are there to save you when things go wrong.

• Make backups daily or at least weekly and store them safely in an offsite location.
• Have a method of monitoring servers for unusual activity.

One time someone breached our site, but (thankfully) our monitoring caught it early on; we restored from our backups in minutes, and it was a manageable incident that we learned from - no mess.

Conclusion​

Web hosts should take security seriously and it should not be an option. Strong passwords, 2FA, updates, encryption, backups, and monitoring should all be considered must-haves, not options.

Next time you choose a web host - ask yourself, could they survive a hack?