They're not necessarily interested in your data but whether they can get in and erase something or plant a virus. Security breaches usually involve an off-line component as well, noted industry analyst Ted Julian, of Forrester Research. That could mean swiping a password from a discarded paper or posing as a technician to receive a password over the phone. And don't forget to lock doors and chain down computers if necessary. One of his clients locks all the company's floppy drives to prevent file copying.
Some firms use computers with no floppy drive at all.
The first step to security is an assessment of your data's value and vulnerability. Legal, medical, financial and personnel records contain highly sensitive information. In addition, customer lists, marketing plans, sales reports, chemical formulas and product designs all need high-level protection. XInvestment in computer security is equal to deciding whether to shred or simply discard paper with company data on it. If you don't have that, nothing else helps you.