"If you don't need it, don't store it." That's rule no. 1 when it comes to corporate data security. Rule no. 2? Most victims have two things in common: The company was storing data it should not have been storing in the first place; and the data that fell into the wrong hands was data it didn't know it had. And if there had to be a Rule no. 3, it would be this: Most victims of a data breach are unwitting enablers of that crime. Don't think that could possibly be your company, or your IT department? Think again.
Source: Optimize, http://optimizemag.com