#15 CASE STUDY - UNGOVERNED BROWSER USAGE

"I installed my favorite browser , IT doesn’t need to control it." 

COMPANY 

  • Sector: Financial Services 

  • Size: 300 employees 

  • Location: Wallonia 

FACTS & FIGURES 

  • 20% of employees using unapproved browsers 

  • No centralized policy enforcement 

  • Business Impact: Increased phishing and data leakage 

STORY 

At a financial services company in Liège, several employees became frustrated with the restrictions imposed on the company-approved browser. They began downloading and installing alternative browsers like Opera and Chrome Canary, often with built-in VPNs. Because these browsers were unmanaged, they bypassed security configurations such as content filters and phishing protection. One employee unknowingly entered client data into a fraudulent website that appeared legitimate. The incident led to sensitive data being leaked, forcing the company to launch an internal investigation and notify affected clients. 

INCIDENT OVERVIEW 

Browsers are the gateway to most business applications, but when unmanaged, they turn into blind spots. Features like built-in VPNs, crypto wallets, or extensions bypass corporate policies and introduce hidden risks. IT loses visibility, logs, and the ability to enforce protections. In this case, employees assumed they were simply choosing a 'faster' or 'better' browser, but in doing so, they disabled the company’s ability to safeguard data. The uncontrolled use of browsers is not just a matter of preference — it becomes a compliance and security gap. 

BUSINESS IMPACT 

  • Increased phishing success rates 

  • GDPR non-compliance due to unmonitored transfers 

  • Reputational loss if client financial data leaked 

SECURITY MEASURES 

  • Enforce browser management policies (Intune/Jamf) 

  • Block installation of unauthorized browsers 

  • Provide secure, modern approved browsers 

  • Monitor outbound traffic anomalies 

RESOURCES 

Ready to strengthen your cybersecurity?

Contact us today to discuss how Cresco's services can help your organisation can protect and secure your organisation.