There have been many examples of misplaced hard drives exposing sensitive information. Travel Security Administration lost an external hard drive which contained 100,000 employee records. Companies continue to strive to lock down their live environment yet ignore the security implications of back-ups. What makes this data less sensitive when it exists on a back-up tape than when it existed on a live server? The attack surface of course changes. You cant use an. SQL injection attack over a web. connection against a back.up tape sitting on a shelf. However it is a lot easier to walk out the door with a back up tape under your coat.”]
Source: https://www.csoonline.com/article/2136914/back-ups–the-weakest-link-in-data-security.html