[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:encryption-key-management":3},{"control":4,"products":25,"stories":55,"lessons":99,"related":124,"compare":133},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.","Encryption of data at rest and in transit, with keys kept in hardware security modules or key management services, and every use of a key logged.","If stolen data is properly encrypted and the keys were not taken, the incident is far less serious, and under GDPR the affected people may not even need to be told. Holding your own keys also answers sovereignty questions about data in the cloud.",[11,12,13,14],"Can we hold our own keys for cloud services (BYOK or HYOK)?","Is the hardware certified, for example FIPS 140-3 or Common Criteria?","How are keys rotated, and who can use them?","What is the plan for post-quantum algorithms?","Risk: exposure of sensitive data at rest or in transit. Control: encryption with centrally managed keys whose use is logged. Owner: security architect. Measure: share of sensitive data stores encrypted with managed keys.",[17,18,19,20],"NIS2 Art. 21(2)(h): cryptography and encryption","DORA Art. 9: protection of cryptographic keys","GDPR Art. 34(3)(a): encrypted data and notifying individuals","ISO\u002FIEC 27001:2022 A.8.24: use of cryptography",{"name":22,"slug":23},"Data Protection","data-protection","2026-10-16T12:48:21.018485+00:00",[26,34,42,47],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":43,"product_name":44,"url":45,"description":46},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"total":56,"last_days":57,"recent":58},728,146,[59,64,69,74,79,84,89,94],{"slug":60,"title":61,"published_at":62,"brief":63},"attackers-tampered-with-aomei-backupper-s-update-servers-for-minutes-to-deliver--ffdcab","Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor","2026-10-16T16:43:39+00:00","Attackers tampered with AOMEI Backupper update servers to deliver a backdoor.",{"slug":65,"title":66,"published_at":67,"brief":68},"burger-king-japan-data-breach-exposes-11-million-customer-records-27c670","Burger King Japan data breach exposes 11 million customer records","2026-10-16T12:01:29+00:00","Burger King Japan data breach exposes 11.18 million customer records.",{"slug":70,"title":71,"published_at":72,"brief":73},"aepd-spain-ps-00194-2025-f24860","AEPD (Spain) - PS\u002F00194\u002F2025","2026-10-16T11:03:01+00:00","Spain's AEPD fines Vodafone Spain €400,000 for data breach due to unmitigated vulnerability.",{"slug":75,"title":76,"published_at":77,"brief":78},"vibetech-database-exposes-13-7m-records-including-at-t-and-fbi-data-f35a85","Vibetech Database Exposes 13.7M Records Including AT&T and FBI Data","2026-10-15T15:48:52+00:00","Vibetech database exposed 13.7M records from previous breaches, including AT&T and FBI data.",{"slug":80,"title":81,"published_at":82,"brief":83},"uk-legal-aid-agency-hack-scope-widens-after-forensic-review-0721f8","UK Legal Aid Agency Hack Scope Widens After Forensic Review","2026-10-15T14:22:34+00:00","UK Legal Aid Agency hack impacts records dating back to 1978.",{"slug":85,"title":86,"published_at":87,"brief":88},"centerpoint-energy-data-breach-impacts-1-million-texans-642e21","CenterPoint Energy Data Breach Impacts 1 Million Texans","2026-10-15T09:55:19+00:00","CenterPoint Energy data breach exposes personal information of over 1 million Texans.",{"slug":90,"title":91,"published_at":92,"brief":93},"uk-legal-aid-agency-hackers-stole-records-dating-back-to-1978-cfef32","UK Legal Aid Agency: Hackers stole records dating back to 1978","2026-10-15T08:06:47+00:00","UK Legal Aid Agency confirms hackers stole records dating back to 1978 in April 2025 breach.",{"slug":95,"title":96,"published_at":97,"brief":98},"garante-per-la-protezione-dei-dati-personali-italy-710-2026-1db143","Garante per la protezione dei dati personali (Italy) - 710\u002F2026","2026-10-14T08:11:18+00:00","Italy's DPA fines IQVIA €7M for GDPR violations after patient data breach.",[100,104,108,112,116,120],{"slug":101,"title":102,"published_at":103},"aomei-backupper-update-servers-hijacked-to-distribute-backdoor","AOMEI Backupper Update Servers Hijacked to Distribute Backdoor","2026-10-16T18:21:08.893+00:00",{"slug":105,"title":106,"published_at":107},"burger-king-japan-breach-exposes-11m-app-users-personal-data","Burger King Japan Breach Exposes 11M App Users' Personal Data","2026-10-16T15:20:48.695+00:00",{"slug":109,"title":110,"published_at":111},"vodafone-spain-fined-400k-after-ignoring-known-vulnerability-for-months","Vodafone Spain Fined €400K After Ignoring Known Vulnerability for Months","2026-10-16T12:20:31.802+00:00",{"slug":113,"title":114,"published_at":115},"uk-legal-aid-agency-breach-exposes-47-years-of-sensitive-records","UK Legal Aid Agency Breach Exposes 47 Years of Sensitive Records","2026-10-15T16:20:35.876+00:00",{"slug":117,"title":118,"published_at":119},"vibetech-exposes-137m-records-in-unsecured-database","Vibetech Exposes 13.7M Records in Unsecured Database","2026-10-15T16:20:19.435+00:00",{"slug":121,"title":122,"published_at":123},"centerpoint-energy-breach-exposes-1m-texans-pii-via-cybercrime-forum-disclosure","CenterPoint Energy Breach Exposes 1M+ Texans' PII via Cybercrime Forum Disclosure","2026-10-15T10:20:22.506+00:00",[125,129],{"slug":126,"name":127,"problem":128},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",{"slug":130,"name":131,"problem":132},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",{"hashicorp\u002Fvault":134,"thales\u002Fciphertrust":149,"thales\u002Fluna-hsm":159,"utimaco\u002Futimaco-hsm":164},{"hq_country":135,"also_provides":136,"reviews":140,"affected":147,"reported":148},"US",[137],{"slug":138,"name":139},"secrets-management","Secrets management",[141,144],{"label":142,"url":143},"PeerSpot: HashiCorp Vault user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fhashicorp-vault-reviews",{"label":145,"url":146},"Gartner Peer Insights: IBM Vault (formerly HashiCorp Vault) user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fibm-vault",3,0,{"hq_country":150,"also_provides":151,"reviews":152,"affected":148,"reported":148},"FR",[],[153,156],{"label":154,"url":155},"NIST FIPS 140-3 certificate #4684: Thales Luna K7 Cryptographic Module","https:\u002F\u002Fcsrc.nist.gov\u002Fprojects\u002Fcryptographic-module-validation-program\u002Fcertificate\u002F4684",{"label":157,"url":158},"Gartner Peer Insights: CipherTrust Data Security Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fciphertrust-data-security-platform",{"hq_country":150,"also_provides":160,"reviews":161,"affected":148,"reported":148},[],[162,163],{"label":154,"url":155},{"label":157,"url":158},{"hq_country":165,"also_provides":166,"reviews":167,"affected":148,"reported":148},"DE",[],[168],{"label":169,"url":170},"NIST FIPS 140-3 certificate #5223: Utimaco u.trust Anchor","https:\u002F\u002Fcsrc.nist.gov\u002Fprojects\u002Fcryptographic-module-validation-program\u002Fcertificate\u002F5223"]