Two paths through the same incident.
Without the Doppelgänger
- 1
Preparation
For a test, the live database is copied to a test server, with all the real customer data.
- 2
Test
A test triggers order and newsletter emails, to real addresses.
- 3
Afterwards
Embarrassing in front of customers, and a copy full of personal data on a test system is a data protection problem in itself.
With the Doppelgänger
- 1
Always
Customer data on the copy is anonymized, and outgoing emails are intercepted.
- 2
When testing
Testing uses real products and processes, without real recipients.
Under the GDPR, a neglected website is not a cosmetic flaw. It requires security in line with the state of the art, from small businesses too.
What the incident costs.
More case studies
The backup that came too late
The website had been infected for three weeks. The host’s backups went back seven days.
The big update without a rehearsal
The Shopware major update ran on Sunday. On Monday the store accepted no payments.
A week of casino ads
For a week the website redirected its visitors to casino sites. It was a customer who noticed.
A typical course of events, assembled from real incidents. Figures are example calculations based on the stated assumptions.