From cyber attacks to GDPR fines to the risk of legal liability, organisations are facing increased risks from unprotected customer data and developer error. Here, we consider the impact of these vulnerabilities and the measures needed to protect against them.