Press Release

Recent Data Theft Highlights Common Database Security Gap

Range of Threats Exposed by Recent Breaches Confirm Need for Protecting Data against Logical Attacks

REDWOOD CITY, Calif.—June 27, 2005— Ingrian® Networks, Inc., the leading provider of data privacy solutions, today announced that Ingrian DataSecure™ Platforms can fill the security gap that is common among many enterprises that store or process sensitive data—a gap that was recently highlighted by the theft of 40 million credit card numbers.

“The reality is that today many organizations still aren’t employing encryption of data at rest,” said Jon Oltsik, Senior Analyst, Information Security, Enterprise Strategy Group. “In recent research, we found that only 7% of enterprises always encrypt the data sent to tape, and even fewer encrypt data at the application or database layer. This recent theft of 40 million credit cards, which was an application-level database attack, illustrates that encrypting sensitive data before it is sent to the database and onto storage, is one of the best ways to address not only thefts of media, but application-level, logical attacks.”

Since the beginning of this year, over 15 large-scale data breaches have been reported, with more than 7.8 million credit card numbers and social security numbers having been potentially exposed. This is prior to the disclosure of breach on Friday, June 17, which reported the theft of 40 million credit cards at an estimated cost of $1 billion. These ongoing breaches have clearly illustrated the mandate to encrypt sensitive data. Yet organizations looking to implement encryption will be faced with a crucial decision: what to encrypt and where within the enterprise to deploy encryption.

“While encrypting data as it’s written to tape or storage is a step forward, this latest breach of 40 million credit cards confirms even that is not enough,” stated Martin Hellman, professor emeritus of electrical engineering at Stanford University, co-inventor of public key cryptography, and a member of Ingrian’s Technical Advisory Board. “Enterprises need to prevent electronic attacks against their valuable corporate databases, and to do so well before sensitive data reaches storage systems. Ingrian’s flexible encryption capabilities enable organizations to gain protection against a broad range of threats plaguing enterprises today.”

By delivering intelligent encryption capabilities, Ingrian helps enterprises cost-effectively address many of their most critical security gaps. DataSecure platforms deliver sophisticated capabilities for encrypting sensitive data in databases and applications, and they can be integrated in heterogeneous environments and be deployed at the Web, application, and/or database layer. These products feature granular encryption, seamless integration, and centralized security management—enabling organizations to boost security, with unparalleled ease and cost effectiveness.

“For years, we’ve been advising customers to encrypt sensitive data as soon as possible within the data processing lifecycle,” explained Karim Toubba, Ingrian’s vice president of product management and marketing. “Organizations that encrypt sensitive data at logical tiers within their applications and databases not only ensure the security of that data in the application and database, but as that data is written to storage and backed up to tape. As a result, organizations can protect against a broad range of real world threats from media theft to logical application and database-specific attacks.”

About DataSecure Platforms

Ingrian’s DataSecure platforms provide an intelligent, cost-effective way to protect critical data from both internal and external threats. As a result, organizations can better ensure that they are compliant with legislative and policy mandates for security, and eliminate the risks of data thefts.

DataSecure offers flexible implementation options so organizations can deploy in a way that makes sense for their business and security needs—whether at the Web, application, or database level. DataSecure platforms can be efficiently integrated in Windows, Java, Linux, and Unix environments, and they work seamlessly with leading databases—including IBM DB2, Oracle, and SQL Server. DataSecure encrypts data in databases and applications at the column or field level, and can be used to secure such data as credit card numbers, social security numbers, passwords, account balances, and email addresses.

About Ingrian Networks

Ingrian Networks brings complete data privacy to the enterprise. With Ingrian DataSecure Platforms, organizations can protect critical data from both internal and external threats, and ensure compliance with legislative and policy mandates for security. DataSecure features a dedicated security appliance and specialized software that enables organizations to encrypt critical data in applications and databases. With its capabilities for granular encryption, seamless integration, and centralized security management, DataSecure enables organizations to guard against a range of security threats, with unparalleled ease and cost effectiveness. Ingrian is a privately held company backed by such investors as Globespan Capital Partners, HighBAR Ventures, Menlo Ventures, Partech International, and Prism Venture Partners. For more information, visit www.ingrian.com.

Ingrian Media Contact

Betty Liang

Ingrian Networks

bliang"at"ingrian.com

650.261.2488