85% of US Organizations Hit by One or More Data Breaches Within the Last Twelve Months

85% of US Organizations Hit by One or More Data Breaches Within the Last
Twelve Months
Latest Research from The Ponemon Institute Shows Data Protection is Part of
Overall Enterprise Risk Management Strategy

MENLO PARK, Calif., July 13 /PRNewswire/ -- PGP Corporation, a global leader
in enterprise data protection, today announced the results from The Ponemon
Institute's fourth annual study on encryption usage in the enterprise - The
2009 Annual Study: U.S. Enterprise Encryption Trends. This year's study
surveyed 997 IT and security practitioners and identifies the trends in
enterprise encryption planning strategies, budgeting and spending, deployment
methodologies and impact on data breach incidents. While 78 percent of
organizations have an encryption strategy in place and are moving toward a
more consistent approach to data protection, data breaches continue to rise
across the board. 85 percent of survey respondents experienced at least one
data breach in the last 12 months, consistent with 84 percent in 2008, and the
number of companies experiencing more than 5 data breaches in one year rose to
22 percent, up from 13 percent last year. For the first time, fifty-eight
percent of the respondents reported that data protection is a very important
part of their overall risk management. Additionally, as organizations
increasingly rely on mobile technology and PDAs as their primary computing
platform, 26 percent indicate they encrypt a smartphone or PDA most of the
time, 51 percent said they never do.

"In our fourth year of conducting this study, we are consistently breaking new
ground in identifying new data protection trends to help enterprises as they
assess their risk posture," said Dr. Larry Ponemon, chairman and founder of
The Ponemon Institute. "Organizations are looking for more complete solutions
that can protect their data wherever it may reside. The focus for 2010 needs
to be on applying a strategic approach to data security across the
enterprise."

The following list summarizes key findings from the study that included nearly
1000 U.S.-based enterprise IT leaders, analysts and executives:
-- Data protection is an important part of an organization's risk
management efforts. For the first time, Ponemon asked how data
protection relates to an organization's risk management efforts.
Fifty-eight percent report that is a very important part of risk
management and 22 percent say it is an important part.
-- Encryption of data on mobile data-bearing devices used by employees is
very important or important. More than 59 percent of respondents say
it
is very important or important to encrypt employees' mobile devices
- a sign that organizations recognize that valuable data is more
mobile
than ever.
-- More than 70% have fully executed or just launched data encryption
strategy in their organization. Once again data encryption strategies
are being implemented across a majority of the respondent
participants.
The majority of organizations, 78 percent, have some type of
encryption
strategy, up from 74 percent in 2008 and from 66 percent in 2007.
-- Data Breaches continue to be a huge problem: Eighty-five percent of
organizations surveyed had had at least 1 data breach in the last 12
months, demonstrating that there is no let up in breaches as this is
consistent with 84 percent sited in the 2008 report. Companies
suffering
more than 5 data breaches rose to 22 percent in 2009 up from 13
percent
in 2008.
-- Encryption is mostly used to mitigate data breaches and comply with
privacy and data protection regulations. In addition, there was an
increase in the percentage of respondents who reported that encryption
is also important to preserving brand and reputation.

-- The percentage of organizations using the platform approach to
managing
encryption solutions has increased. Additionally, 76 percent would
strongly recommend or recommend the platform-based approach if it
reduced the cost of acquiring, deploying and managing encryption
applications.

"This year's research clearly demonstrates that compliance, breaches and brand
damage are driving companies to deploy more data protection solutions," said
Phillip Dunkelberger, president and CEO of PGP Corporation. "The risk
migration goal is clear; take a more strategic approach to protect your data -
at rest, in motion and in use."

The 2009 Annual Study: UK Enterprise Encryption Trends was released last week
and reports in Germany and Australia will be released in the coming months.

For more information or to receive a copy of this study, visit:
http://www.encryptionreports.com

About The Ponemon Institute
The Ponemon Institute(C) is dedicated to advancing responsible information and
privacy management practices in business and government. To achieve this
objective, the Institute conducts independent research, educates leaders from
the private and public sectors and verifies the privacy and data protection
practices of organizations in a variety of industries.

About PGP Corporation
PGP Corporation is a global leader in email and data encryption software for
enterprise data protection. Based on a unified key management and policy
infrastructure, the PGP(R) Encryption Platform offers the broadest set of
integrated applications for enterprise data security. PGP(R) platform-enabled
applications allow organizations to meet current needs and expand as security
requirements evolve for email, laptops, desktops, instant messaging,
smartphones, network storage, file transfers, automated processes, and
backups.

PGP(R) solutions are used by more than 80,000 enterprises, businesses, and
governments worldwide, including 95 percent of the Fortune(R) 100, 75 percent
of the Fortune(R) Global 100, 87 percent of the German DAX Index, and 51
percent of the U.K. FTSE 100 Index. As a result, PGP Corporation has earned a
global reputation for innovative, standards-based, and trusted solutions. PGP
solutions help protect confidential information, secure customer data, achieve
regulatory and audit compliance, and safeguard companies' brands and
reputations. Contact PGP Corporation at www.pgp.com.

Media & Analyst Contacts for PGP Corporation:

North America
Christina Grenier
PGP Corporation
+1 650 543 3697
cgrenier@pgp.com

Tom Rice
Merritt Group
+1 703 856 2218
rice@merrittgrp.com

United Kingdom
Jacqui Depares / Richard Scarlett
Johnson King
+44 (0) 20 7401 7968
pgpteam@johnsonking.co.uk

Germany
Ingrid Daschner
Johnson King
+49 (0) 89 8940 8511
ingridd@johnsonking.de

Legal Notice Regarding Forward-Looking Statements
Some of the statements in this press release are forward-looking, including
statements regarding the availability, plans, delivery, goals, development,
expected features, expected benefits and competitive position of PGP products
implementing or leveraging the PGP technologies. All references made to
product feature enhancements, improvements in Platform support or additional
functionality are subject to change at PGP Corporation's sole discretion. All
future descriptions of PGP technology and products are subject to availability
only if PGP Corporation decides to build them and when PGP Corporation decides
to make them commercially available. Actual results could differ materially
from those expressed in any forward-looking statements. Risks and
uncertainties that PGP Corporation faces that could cause results to differ
materially include risks associated with any unforeseen technical difficulties
or software errors related to the final development and launch of any of PGP
Corporation's products; any technological, regulatory, or standards changes in
the security, encryption and authentications market which could make PGP
Corporation's products less competitive or require feature changes in these
products; any slowdown in the adoption by businesses of encryption suites,
secure email, Internet technologies or related standard. The forward-looking
statements contained in this release are made as of the date hereof, and PGP
Corporation does not assume any obligation to update such statements nor the
reasons why actual results could differ materially from those projected in
such statements.

PGP and the PGP logo are registered trademarks of PGP Corporation. Product and
brand names used in the document may be trademarks or registered trademarks of
their respective owners. Any such trademarks or registered trademarks are the
sole property of their respective owners.

SOURCE PGP Corporation

North America, Christina Grenier of PGP Corporation, +1-650-543-3697,
cgrenier@pgp.com; or Tom Rice of Merritt Group, +1-703-856-2218,
rice@merrittgrp.com, or United Kingdom, Jacqui Depares or Richard Scarlett,
+44 (0) 20 7401 7968, pgpteam@johnsonking.co.uk, or Germany, Ingrid Daschner,
+49 (0) 89 8940 8511, ingridd@johnsonking.de, all of Johnson King, for PGP
Corporation