--- title: How FinTechs can Avoid Data Spills from the Cloud description: A lack of specialized cloud security skills is forcing organizations to find security strategies that close gaps without needing additional specialists. image: https://insights.comforte.com/hubfs/blog%20fintech%20cloud%20security.jpeg --- [![Hubspot_blog_logo](https://insights.comforte.com/hs-fs/hubfs/Hubspot_blog_logo.png?width=295&name=Hubspot_blog_logo.png)](http://www.comforte.com) [![Subscribe](https://no-cache.hubspot.com/cta/default/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0) [![fintech cloud security](https://insights.comforte.com/hubfs/blog%20fintech%20cloud%20security.jpeg)](https://insights.comforte.com/how-fintechs-can-avoid-data-spills-from-the-cloud) [Mark Bower](https://insights.comforte.com/author/mark-bower) l Jan 5, 2021 l [Data Protection](https://insights.comforte.com/tag/data-protection), [Cloud Computing](https://insights.comforte.com/tag/cloud-computing) # How FinTechs can Avoid Data Spills from the Cloud This [recent story on TechRadar](https://www.techradar.com/news/microsoft-azure-breach-left-thousands-of-customer-records-exposed) illustrates precisely the problem of data security and risk governance faced by enterprises today in the vastness of their accelerated digital transformation. Clearly, the data in question is regulated under a variety of rulings – GDPR being the most obvious, but as this is insurance related, this falls under FSA, ICO in the UK, and if this is US related data, perhaps GLBA. That usually means scrutiny over handling and care, yet here, the data in question was left exposed to compromise all too easily. I’m sure the developer noted in the article was doing their best to meet business objectives and timelines with this Azure related project, but the breach points to avoidable gaps in cloud data security risk management, so how did this type of incident happen to well-intentioned enterprises? While [regulations like CCPA and GDPR](https://insights.comforte.com/13-countries-with-gdpr-like-data-privacy-laws?hsLang=en) promote the notion of ‘Secure by Design’ and ‘Privacy by Design’ principles, at the end of the day, it’s often left up to developers to deliver under extreme pressure. A new generation of early-career software developers brings much-sought high-value skills in cloud app dev either from experience in fast-moving cloud-first startups or recent professional training, but they often rely on those very platforms for security without deep awareness of their limitations in respect to resilience and security completeness under attack, misconfiguration, or compromise. But why should they? Their goals are business value and customer experience optimization – the hooks that differentiate and delight end users to bring about the birth of unicorns. However, substantial investment to transform ideas to innovation and execution can be moot if customer delight turns to customer distrust in the event of a data breach. Consumers will hesitate to adopt, quickly turn and move on, and the incident may be irrecoverable with heavy toll on the C-suite of the affected entity. Data security thus must become part of the Dev Ops fabric and process, in the CI/CD pipeline – and by default, not the exception, nor bolted on after it’s too late. In the enterprise space over the last decade, seasoned developers and engineering managers who have lived through painful data breach incidents and bought into evolved [OWASP principles](https://owasp.org/www-project-top-ten/) and [MITRE ATT&CK situational awareness](https://attack.mitre.org/) weave security and risk mitigation into software development lifecycles and operational process. Seasoned enterprise security architects with responsibility to bring ‘state of the art’ to the table in new Data Engineering strategies may also be well versed in [powerful defense techniques](https://www.comforte.com/resources-detail/news/evaluating-data-centric-protection-solutions/) like tokenization, data-centric encryption, and Zero Trust architectures. Unfortunately, this level of experience isn’t pervasive. According to [the recent ISC2 report](https://www.isc2.org/Research/Workforce-Study), even with COVID and changes in hiring and focus on digital transformation, the cyber security industry still needs a staggering 89% growth in skilled practitioners to meet demand – a backlog of over 3 million skilled workers. Severe lack of cyber security skills, combined with increasing complexity of infrastructure in transformation and data engineering projects means organizations must adopt security tooling and governance that solves the risk and privacy issues while being immediately consumable without needing even more specialists. 2021 is going to amplify this problem, and the breach noted above is merely the thin end of the wedge. This case is precisely why modern data security tooling that doesn’t require a PhD to integrate, operate and manage is essential for every CISO who’s ultimately the accountable caretaker of personal and sensitive data fueling enterprise growth and agility. If this sounds like a familiar challenge, and your transformation projects have data leakage risk concerns you’d like to avoid, don’t hesitate to [get in touch](https://www.comforte.com/contact/). --- | Share this:  | [![LinkedIn](https://insights.comforte.com/hubfs/Social%20Icons/linkedin%20icon.png)](https://www.linkedin.com/shareArticle?mini=true&url=https://insights.comforte.com/how-fintechs-can-avoid-data-spills-from-the-cloud&utm_medium=social&utm_source=linkedin) | [![Bluesky](https://insights.comforte.com/hubfs/Social%20Icons/bluesky_logo.png)](https://bsky.app/intent/compose?url=https://insights.comforte.com/how-fintechs-can-avoid-data-spills-from-the-cloud&utm_medium=social&utm_source=Bluesky) | ![Twitter](https://insights.comforte.com/hubfs/Social%20Icons/twitter_x_logo-1.png) | [![XING](https://insights.comforte.com/hubfs/Social%20Icons/xing-color2.png)](https://www.xing.com/spi/shares/new?url=https://insights.comforte.com/how-fintechs-can-avoid-data-spills-from-the-cloud&utm_medium=social&utm_source=xing) | [![Email](https://insights.comforte.com/hubfs/Social%20Icons/email%20icon.png)](mailto:?subject=Check%20out%20https://insights.comforte.com/how-fintechs-can-avoid-data-spills-from-the-cloud&utm_medium=social&utm_source=email%20&body=Check%20out%20https://insights.comforte.com/how-fintechs-can-avoid-data-spills-from-the-cloud&utm_medium=social&utm_source=email) | | --- | --- | --- | --- | --- | --- | ## Want to learn more? If your organization wants to reduce risk when exchanging files across private and public networks and spend less time with configuration and setup, click the button below to learn how to secure your data before it even enters the cloud, without affecting usability:  [![Download Fact Sheet](https://no-cache.hubspot.com/cta/default/4026697/030419e2-8498-4660-8996-02ee0c0f53cc.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/030419e2-8498-4660-8996-02ee0c0f53cc) ### Related posts ![Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/hubfs/comforte%20AG_%20Reuse%20Reward_%20How%20Banks%20Can%20Safely%20Unlock%20the%20Value%20of%20Their%20Data_03.2025.png) Mar 12, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Payments Transformation](https://insights.comforte.com/tag/payments-transformation) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) The financial world is awash with data. But too few organizations are able to use it effectively. In [Bank Director’s *2025 Technology Survey*](https://www.bankdirector.com/wp-content/uploads/2025/09/2025TechReport-OpenVersion.pdf), one-third of US banking leaders cite an inability to harness data as a top technology challenge facing their... [Read more](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) ![Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/hubfs/comforte%20AG_Delivering%20a%20Secure%2c%20Trusted%20Foundation%20for%20Cloud%20Growth%20at%20LGT_01.2026.png) Jan 15, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) There’s a world of difference between retail and private banking. While the former is transactional and focused on the mass market, the latter is built on trust and personal relationships. That trust can be hard won, but is easily lost, especially... [Read more](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) ![Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/hubfs/comforte%20AG_Top%20Indicators%20You%20Have%20a%20Cybersecurity%20Problem_and%20What%20to%20Do%20About%20It.png) May 22, 2025 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Digital Enablement](https://insights.comforte.com/tag/digital-enablement) ### [Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) Data is both blessing and curse to the modern enterprise. Yes, when analyzed effectively it can surface intelligence to improve decision making, customer engagement, process efficiency and, ultimately, drive revenue. But it also represents a major... [Read more](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) ### Service - [Contact](https://www.comforte.com/contact/) - [About us](https://www.comforte.com/company/) - [Blog](https://insights.comforte.com/) - [Press Releases](https://www.comforte.com/company/press-releases/) - [Career](https://www.comforte.com/company/career/) - [Resources](https://www.comforte.com/resources/) ### Germany comforte AG Abraham-Lincoln-Str. 22 65189 Wiesbaden Germany Phone: + 49 611 93199 00 Fax: + 49 611 93199 05 ### Australia comforte PTY Suite 20, 1 Rivett Road North Ryde NSW 2113 Australia Postal Address: PO Box 1710 Lane Cove NSW 1595 Australia Phone: +61 2 8197 0272 ### USA comforte Inc. 30 Wall Street, 8th Floor New York, NY 10005-2205 USA Phone: +1-646-438-5716 ### Singapore comforte Asia Pte. Ltd. 1 Raffles Place, #19-61 Tower 2  Singapore 048616 Phone: +65 6808 5507 - [Sitemap](https://www.comforte.com/sitemap/) - [Legal Notice](https://www.comforte.com/legal-notice/) - [Privacy Policy](https://www.comforte.com/privacy-policy/) © comforte AG 2026