- Total Breach Numbers Down
The good news: year-over-year reports of data breaches have decreased in number of incidents and number of breached records
- Total Breach Numbers Down
Jan. 1-Jun. 15 2009: 250 incidents with 12.2 million records breached
Jan. 1-Jun. 15, 2008: 342 incidents with 16.8 million records breached
- Malicious Attacks Up
The bad news: that the percentage of malicious attacks on databases is at its highest since ITRC started reporting in 2005, making up 36% of all breaches so far this year.
- Malicious Attacks Up
Insider Theft Percentages
Jan. 1-Jun. 15 2009: 18.4 %
Jan. 1-Jun. 15 2008: 15%
Jan. 1-Jun. 15 2007: 6%
- Malicious Attacks Up
Hacking Percentages
Jan. 1-Jun. 15 2009: 18%
Jan. 1-Jun. 15 2008: 11.7%
Jan. 1-Jun. 15 2009: 14.1%
- Data Unencrypted and Unlocked
So far in 2009, only 0.4% of all breaches occurred on devices with encryption or similar data protection measures in place.
- Data Unencrypted and Unlocked
Similarly, only 7.2% of breaches reported this year have occurred on systems with data password protection.
- Low-Tech Paper Breaches Up
IT isn’t the only organization to blame—more than 25% of breaches this year occurred due to exposed paper documents.
- Breaches by Sector
Even though Medical and Healthcare breaches only made up 13.2% of incidents, they accounted for 70.7% of exposed records.
- Breaches by Sector
Government and military agencies were the second-biggest exposure vehicles, making up 18.4% of incidents and 23.9% of exposed records.
- Breaches by Sector
Other Sectors:
Financial companies experienced 12.4% of incidents but only exposed 0.2% of records.
General businesses made up 41.6% of incidents and exposed just 2.1% of records.
Educational organizations experienced 14.4% of breaches and exposed 3% of records.