Data Lockdown
As online fraud spreads, an inexpensive device from a small firm catches on.
By Ron Stodghill/Oakbrook Terrace, Ill


- A recent survey estimated that almost two million Internet users in the U.S. inadvertently gave personal information to cyberscammers last year. Increasingly the weapon of choice is a "phishing" expedition, in which a con artist poses as your bank and asks you to go online and confirm details such as your account number or password. Such attacks cost credit card companies and banks some $1.2 billion in 2004. But a small technology firm came up with a solution to stop phishing attacks years ago. Only recently, says Kendall Hunt, the founder and CEO of Vasco Security, based in Oakbrook, Ill., has the market come around to the login security pass that Vasco has been selling for nearly a decade.

Launched out of Hunt's basement in 1984, Vasco is now among the hottest firms in the data-security industry. Its projected revenues for 2005 will climb 74%, to $52 million, while profits are on track to rise 20%, to $33 million. Vasco's stock, which trades on Nasdaq, has surged nearly 400% over the previous 12 months, to nearly $11 as of Nov. 1.

The technology Vasco developed is called two-way authentication. It uses a small token, called Digipass, that shows a six-digit number that changes every 30 seconds. To log on to a bank's website, a user must enter the number from the token. A server at the bank or credit card company keeps track of which numbers are currently valid for which users. In other words, no Digipass, no access.

To be sure, Digipass hardly boasts cutting-edge technology. Similar products are sold by larger firms, such as RSA in Bedford, Mass., which has 65% of the market. And as Internet security rivals contend, two-way authentication is "only a small piece of the security pie," says Brad Miller, CEO of Milford, Conn.-based Perimeter, which provides data-security services ranging from firewalls to spam and content filtering. What sets Digipass apart is its price, about $7 a user on average, compared with $10 or more for rival models. It's a no-frills version, safer than passwords alone and good for tasks such as online banking and e-mail.

During the past decade most of Vasco's clients were overseas. (It does business in about 80 countries.) "A lot of U.S. companies simply weren't that interested in data security," says Hunt, 60. "I guess the market wasn't quite ready." But with phishing and other online fraud on the rise, the market here is more than ready now.

A recent survey estimated that almost two million Internet users in the U.S. inadvertently gave personal information to cyberscammers last year. Increasingly the weapon of choice is a "phishing" expedition, in which a con artist poses as your bank and asks you to go online and confirm details such as your account number or password. Such attacks cost credit card companies and banks some $1.2 billion in 2004. But a small technology firm came up with a solution to stop phishing attacks years ago. Only recently, says Kendall Hunt, the founder and CEO of Vasco Security, based in Oakbrook, Ill., has the market come around to the login security pass that Vasco has been selling for nearly a decade.

Launched out of Hunt's basement in 1984, Vasco is now among the hottest firms in the data-security industry. Its projected revenues for 2005 will climb 74%, to $52 million, while profits are on track to rise 20%, to $33 million. Vasco's stock, which trades on Nasdaq, has surged nearly 400% over the previous 12 months, to nearly $11 as of Nov. 1.

The technology Vasco developed is called two-way authentication. It uses a small token, called Digipass, that shows a six-digit number that changes every 30 seconds. To log on to a bank's website, a user must enter the number from the token. A server at the bank or credit card company keeps track of which numbers are currently valid for which users. In other words, no Digipass, no access.

To be sure, Digipass hardly boasts cutting-edge technology. Similar products are sold by larger firms, such as RSA in Bedford, Mass., which has 65% of the market. And as Internet security rivals contend, two-way authentication is "only a small piece of the security pie," says Brad Miller, CEO of Milford, Conn.-based Perimeter, which provides data-security services ranging from firewalls to spam and content filtering. What sets Digipass apart is its price, about $7 a user on average, compared with $10 or more for rival models. It's a no-frills version, safer than passwords alone and good for tasks such as online banking and e-mail.

During the past decade most of Vasco's clients were overseas. (It does business in about 80 countries.) "A lot of U.S. companies simply weren't that interested in data security," says Hunt, 60. "I guess the market wasn't quite ready." But with phishing and other online fraud on the rise, the market here is more than ready now.  Top of page

Market indexes are shown in real time, except for the DJIA, which is delayed by two minutes. All times are ET. Disclaimer LIBOR Warning: Neither BBA Enterprises Limited, nor the BBA LIBOR Contributor Banks, nor Reuters, can be held liable for any irregularity or inaccuracy of BBA LIBOR. Disclaimer. Morningstar: © 2014 Morningstar, Inc. All Rights Reserved. Disclaimer The Dow Jones IndexesSM are proprietary to and distributed by Dow Jones & Company, Inc. and have been licensed for use. All content of the Dow Jones IndexesSM © 2014 is proprietary to Dow Jones & Company, Inc. Chicago Mercantile Association. The market data is the property of Chicago Mercantile Exchange Inc. and its licensors. All rights reserved. FactSet Research Systems Inc. 2014. All rights reserved. Most stock quote data provided by BATS.
Market indexes are shown in real time, except for the DJIA, which is delayed by two minutes. All times are ET. Disclaimer LIBOR Warning: Neither BBA Enterprises Limited, nor the BBA LIBOR Contributor Banks, nor Reuters, can be held liable for any irregularity or inaccuracy of BBA LIBOR. Disclaimer. Morningstar: © 2014 Morningstar, Inc. All Rights Reserved. Disclaimer The Dow Jones IndexesSM are proprietary to and distributed by Dow Jones & Company, Inc. and have been licensed for use. All content of the Dow Jones IndexesSM © 2014 is proprietary to Dow Jones & Company, Inc. Chicago Mercantile Association. The market data is the property of Chicago Mercantile Exchange Inc. and its licensors. All rights reserved. FactSet Research Systems Inc. 2014. All rights reserved. Most stock quote data provided by BATS.