Berwicq's recent data breach can be traced to several vulnerabilities in its current security posture. Critical systems were accessed using outdated firewall configuration and protocols like Telnet, often over public Wi-Fi, and sensitive information was stored unencrypted. They also didn't have a proper BYOD policy in place. In addition, weak access controls allowed employees to access sensitive data, including proprietary formulas and customer health information, far beyond their role-based needs. Monitoring systems alerts were ignored, and poor logging made detection difficult. No centralized system for managing user privileges allowed employees to have access to sensitive data after role changes or offboarding. A lack of cybersecurity culture, outdated training, and the absence of an established incident response plan compounded these vulnerabilities. How Issues Lead to Future Incidents