barr's Verizon dbir analysis

Key Trends

Stolen credentials, phishing, and exploitation of vulnerabilities are the top attack methods for gaining access to organizational systems.

The number of social engineering attacks has increased, with compromised business emails and ransomware leading the charge.

Banks and exchanges have become prime targets for cyber criminals with four times the increase in cryptocurrency-based attacks compared to previous years.

The Log4j vulnerability, while initially concerning, was less prominent in breaches than anticipated but still requires attention.

Organizations of all sizes and industries remain vulnerable to ransomware.

Notable Statistics

Business email compromised attacks have almost doubled and represent more than 50% of incidents in the social engineering pattern.

74% of all breaches involve human error.

83% of breaches involve external actors.

Financial motive is the reason for 95% of breaches.

24% of reported breaches involve ransomware, which remains a significant threat.

More than 32% of all Log4j scanning activities occurred within just 30 days of its release.