DBIR Report 2024 - Summary of Findings

<!DOCTYPE HTML> <html lang="en"> <head> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <link rel="preconnect" href="https://cdn.cookielaw.org"/> <link rel="preconnect" href="https://solutions.invocacdn.com"/> <link rel="preconnect" href="https://js-agent.newrelic.com/"/> <link rel="preconnect" href="https://resources.digital-cloud.medallia.com/"/> <link rel="preconnect" href="https://www.googletagmanager.com"/> <link rel="preconnect" href="https://connect.facebook.net"/> <link rel="preconnect" href="https://lpcdn.lpsnmedia.net"/> <link rel="preconnect" href="https://vzwb.15gifts.com/"/> <link rel="preload" href="https://d23uobcja6cuc.cloudfront.net/business/etc.clientlibs/ves/clientlibs/main.css" as="style" type="text/css"/> <link rel="preload" href="https://d23uobcja6cuc.cloudfront.net/business/etc.clientlibs/ves-cake/css.css" as="style" type="text/css"/> <link rel="preload" as="font" type="font/woff2" href="https://scache2.vzw.com/globalnav/fonts/verizon-nhg/VerizonNHGeDS-Bold.woff2" crossorigin/> <link rel="preload" as="font" type="font/woff2" href="https://scache1.vzw.com/globalnav/fonts/verizon-nhg/VerizonNHGeDS-Regular.woff2" crossorigin/> <link rel="preload" as="style" type="text/css" href="https://www.verizon.com/etc/designs/vzwcom/gnav20/core.css" fetchpriority="low"/> <link rel="preload" as="script" type="text/javascript" href="https://www.googletagmanager.com/gtm.js?id=GTM-W2VN2CQ" crossorigin="anonymous"/> <link rel="preload" as="script" type="text/javascript" href="https://www.googletagmanager.com/gtag/js?id=G-E3PK2MPLW2" crossorigin="anonymous"/> <link rel="preload" as="script" type="text/javascript" href="https://www.googletagmanager.com/gtag/js?id=G-12R1DX1LX7&l=dataLayer&cx=c" crossorigin="anonymous"/> <link rel="preload" as="script" type="text/javascript" href="https://vzwb.15gifts.com/leap/web/v2.99.4-fe14b59-vzwb/vendors.partner.js" crossorigin="anonymous"/>  <link rel="preload" href="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/01-e06e6468-2-1-01.svg" as="image" fetchpriority="low"/> <link rel="preload" href="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/02-406b8170-1-01.svg" as="image" fetchpriority="low"/> <link rel="preload" href="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/03-c6bb8d59-2-1-01.svg" as="image" fetchpriority="low"/> <link rel="preload" href="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/04-4c70a87f-1-1-01.svg" as="image" fetchpriority="low"/> <link rel="preload" href="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/05-1ee8b0a9-2-1-01.svg" as="image" fetchpriority="low"/> <link rel="preload" href="https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js" as="script" type="text/javascript" fetchpriority="low"/> <link rel="preload" href="/business/etc.clientlibs/ves/clientlibs/main/resources/scripts/nr.js" as="script" type="text/javascript" fetchpriority="low"/> <link rel="preload" href="/business/etc.clientlibs/ves-cake/js.js" as="script" type="text/javascript" fetchpriority="low"/> <link rel="preload" href="/business/etc.clientlibs/ves/clientlibs/main.js" as="script" type="text/javascript" fetchpriority="low"/> <link rel="preload" href="https://d23uobcja6cuc.cloudfront.net/business/etc.clientlibs/ves-apps/template/leftNav/clientlibs.css" as="style" type="text/css" fetchpriority="low"/>  <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1, maximum-scale=5.0"/> <meta http-equiv="content-type" content="text/html; charset=UTF-8"/> <link rel="canonical" href="https://www.verizon.com/business/en-gb/resources/reports/dbir/2024/summary-of-findings/"> <title>DBIR Report 2024 - Summary of Findings | Verizon</title> <meta name="path" content="Here are the summary of findings for the DBIR 2024 report which provide a high level overview on what we are seeing regarding the latest trends in data breaches."/> <meta name="description" content="Here are the summary of findings for the DBIR 2024 report which provide a high level overview on what we are seeing regarding the latest trends in data breaches."/> <meta content="DBIR Report 2024 - Summary of Findings" property="og:title"/> <meta content="Here are the summary of findings for the DBIR 2024 report which provide a high level overview on what we are seeing regarding the latest trends in data breaches." property="og:description"/> <meta content="https://d23uobcja6cuc.cloudfront.net/business/dam/images/illustrations/reports/dbir/2024/placement-dbir-702x466-d.jpg" property="og:image"/> <meta content="Verizon Business" property="og:site_name"/> <meta content="website" property="og:type"/> <meta content="en" property="og:locale"/> <meta content="@VerizonBusiness" property="twitter:site"/> <meta content="summary_large_image" property="twitter:card"/> <meta content="https://www.verizon.com/business/en-gb/resources/reports/dbir/2024/summary-of-findings/" property="og:url"/> <link rel="stylesheet" href="https://d23uobcja6cuc.cloudfront.net/business/etc.clientlibs/ves/clientlibs/main.css" type="text/css"> <script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js"></script> <meta name="locale" content="en-gb"/> <link rel="icon" type="image/x-icon" href="https://www.verizon.com/favicon.ico"/>  <meta https-equiv="content-language" content="en-gb"/> <style>.cup.usOnly { display:none; }</style>   <script type="text/javascript" src="/business/etc.clientlibs/ves/clientlibs/main/resources/scripts/nr.js" async></script> <script> var pagequery = location.search; if (typeof newrelic == 'object') { newrelic.setCustomAttribute('querystring', pagequery); } </script>   <script> var digitalData = window.digitalData || { pageInfo: {}, page: {}, internalCampaignInfo: {}, visitorProfile: {}, userProfile: {}, formInfo: {}, filterInfo: {}, CommunicationInfo: {} }; // line 5 - 32 digitalData.pageInfo.pageName = 'vbg:emea:gb:en:resources:reports:dbir:2024:summary-of-findings'; digitalData.pageInfo.siteSectionsLevel1 = 'Business';digitalData.pageInfo.siteSectionsLevel2 = 'Resources and Industry Insights';digitalData.pageInfo.siteSectionsLevel3 = 'reports';digitalData.pageInfo.siteSectionsLevel4 = 'dbir';digitalData.pageInfo.siteSectionsLevel5 = '2024';digitalData.pageInfo.siteSectionsLevel6 = 'summary-of-findings'; digitalData.pageInfo.siteSectionsLevel5 = 'Business:Resources and Industry Insights:reports:dbir:2024:summary-of-findings'; digitalData.pageInfo.MarketoID = "undefined"; digitalData.pageInfo.MarketoStatus = "undefined"; digitalData.pageInfo.url = window.location.href; digitalData.pageInfo.pageurl = 'https://dmarc.mx.anwb.verizon.co.nl/business/en-gb/resources/reports/dbir/2024/summary-of-findings/'; digitalData.pageInfo.seoStrategyPageName = 'Summary of Findings'; digitalData.pageInfo.pageType = 'enterprise: '; digitalData.pageInfo.pageSubType = 'undefined'; digitalData.pageInfo.languageSelected = 'en'; digitalData.pageInfo.siteName = 'Verizon Business Group'; digitalData.pageInfo.brand = 'vbg'; digitalData.pageInfo.country = 'gb'; digitalData.pageInfo.region = 'emea'; digitalData.pageInfo.renderedExperience = (window.innerWidth > 1200) ? "large" : ((window.innerWidth < 768) ? "small" : "medium"); digitalData.pageInfo.viewport = window.innerWidth + "x" + window.innerHeight; digitalData.pageInfo.orientation = (window.innerWidth < window.innerHeight) ? "Portrait" : "Landscape"; // line 39 digitalData.internalCampaignInfo.internalSearchNumberOfResults = "undefined"; // line 42 - 47 digitalData.visitorProfile.userProfileStateAuthentication = "undefined"; digitalData.visitorProfile.userLoginStart = "undefined"; digitalData.visitorProfile.userLoginComplete = "undefined"; digitalData.visitorProfile.userRegistrationStart = "undefined"; digitalData.visitorProfile.userRegistrationComplete = "undefined"; digitalData.visitorProfile.zipCode = ""; // line 81 - 85 digitalData.formInfo.formName = "undefined"; digitalData.formInfo.formType = "undefined"; digitalData.formInfo.formGate = "undefined"; digitalData.formInfo.formFieldName = "undefined"; digitalData.formInfo.errorMessage = "undefined"; // line 89 - 91 digitalData.filterInfo.filterType = "undefined"; digitalData.filterInfo.filterValue = "undefined"; digitalData.filterInfo.filterSelected = "undefined"; // line 95 - 98 digitalData.CommunicationInfo.communicationType = "undefined"; digitalData.CommunicationInfo.communicationType = "undefined"; digitalData.CommunicationInfo.surveyId = "undefined"; digitalData.pageInfo.chatOff=''; </script> <script> if (window.self === window.top || window.frameElement.getAttribute("id") != 'pfFrame' ) { var launchtag = document.createElement("script"); launchtag.setAttribute('src', '//assets.adobedtm.com/96f174b1df1f/841b4e3cdb43/launch-e41e5dabca84.min.js'); launchtag.setAttribute('async', ''); launchtag.setAttribute('defer', ''); document.getElementsByTagName("head")[0].appendChild(launchtag); } </script>    <script> if (false) { if (typeof(dataLayer)=="undefined") { dataLayer=[]; } dataLayer.push({'chat_off':true}); } (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.defer=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-W2VN2CQ'); </script>  </head> <body class=" page hasSecondaryNav ">  <noscript> <iframe src="https://www.googletagmanager.com/ns.html?id=GTM-W2VN2CQ" height="0" width="0" style="display:none;visibility:hidden"></iframe> </noscript> <script type='application/ld+json'> {"@context": "http://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"item":{"name":"Business","@id":"https://www.verizon.com/business/"}},{"@type":"ListItem","position":2,"item":{"name":"Business Resources and Industry Insights","@id":"https://www.verizon.com/business/en-gb/resources/"}},{"@type":"ListItem","position":3,"item":{"name":"Reports","@id":"https://www.verizon.com/business/en-gb/resources/reports/"}},{"@type":"ListItem","position":4,"item":{"name":"2024 Data Breach Investigations Report","image":"https://d23uobcja6cuc.cloudfront.net/business/content/dam/business-markets/images/illustrations/reports/dbir/2024/placement-dbir-702x466-d.jpg","@id":"https://www.verizon.com/business/en-gb/resources/reports/dbir/"}},{"@type":"ListItem","position":5,"item":{"name":"2024","@id":"https://www.verizon.com/business/en-gb/resources/reports/dbir/2024/"}},{"@type":"ListItem","position":6,"item":{"name":"Summary of Findings","@id":"https://www.verizon.com/business/en-gb/resources/reports/dbir/2024/summary-of-findings/"}}]} </script>  <header role="banner" data-gnav="smb"> <link rel="stylesheet" type="text/css" href="https://www.verizon.com/etc/designs/vzwcom/gnav20/core.css"/> <style> header { overflow:visible;min-height:69px; } .gnav20-ribbontext+div .gnav20-main { min-height: 80px; } </style> <div id="vz-gh20"></div> <script type="text/javascript"> var gnavdl = {"host":"https://www.verizon.com","bu":"smb", "appid":"meganav-en-gb", "variation":"", "impltype":"NOTssi", "json":"", "yextSearchURL":"https://sitesearchbar-iframe.verizon.com.pagescdn.com/"} if (typeof(MP)=="undefined"){ window.MP={init:function(){}} }; function checkNav() { var t=document.getElementById("vz-gh20"); if (t && !t.children.length) { if (typeof(gnav20)!="undefined" && !gnav20.context){ gnav20.context=gnavdl.bu+gnavdl.appid+gnavdl.variation; console.log("nav missing"); gnav20.loadHeader(gnav20.context); } } } function checkNavt() { setTimeout(checkNav,2750); } if (gnavdl.bu){ document.addEventListener("DOMContentLoaded",function(){ if (typeof(gnav20)=="undefined") { var j=document.createElement("script"); //j.src=[gnavdl.host,"etc/designs/vzwcom/gnav20",gnavdl.bu+".js"].join("/"); j.src=[ ,"etc/designs/vzwcom/gnav20",gnavdl.bu+".js"].join("/"); j.async=true; j.onload=checkNavt; document.head.appendChild(j); } }); } </script> </header> <div id="main" role="main" class="generic-page"> <div class="secondarynav "> <div class="secondarycontent"> <div class="breadcrumbnav"> <ul aria-label="Breadcrumb" class="breadcrumb-list"> <li class="home"> <a role="link" name="Bread Crumb" class="vz-text-link" data-loc="Secondary Nav:Breadcrumb" href="https://www.verizon.com/business/en-gb/">Business</a> </li> <li> <a role="link" name="Bread Crumb" class="vz-text-link" data-loc="Secondary Nav:Breadcrumb" href="https://www.verizon.com/business/en-gb/resources/">Business Resources and Industry Insights</a> </li> <li> <a role="link" name="Bread Crumb" class="vz-text-link" data-loc="Secondary Nav:Breadcrumb" href="https://www.verizon.com/business/en-gb/resources/reports/">Reports</a> </li> <li> <a role="link" name="Bread Crumb" class="vz-text-link" data-loc="Secondary Nav:Breadcrumb" href="https://www.verizon.com/business/en-gb/resources/reports/dbir/">2024 Data Breach Investigations Report</a> </li> <li> <a role="link" name="Bread Crumb" class="vz-text-link" data-loc="Secondary Nav:Breadcrumb" href="https://www.verizon.com/business/en-gb/resources/reports/dbir/2024/">2024</a> </li> <li> <a role="link" name="Bread Crumb" class="vz-text-link" data-loc="Secondary Nav:Breadcrumb" href="https://www.verizon.com/business/en-gb/resources/reports/dbir/2024/summary-of-findings/">Summary of Findings</a> </li> </ul></div> <div class="modalcontactus socialsharenav"> <span class="contact-us"> <div class="link-chat icon" id="bc-chat-link" style="display:flex;"></div> </span> <div class="contact-us"> <a href="tel:+44%20118%20905%205000" class="vz-text-link " data-loc="Secondary Nav:Contact Us:+44 118 905 5000" aria-label="Contact Us"><span>+44 118 905 5000</span></a> <style>div.tt_phone_link { display:none; }</style> </div> <div class="contact-us"> <a href="/business/en-gb/contact-us/" class="vz-button-link button" data-loc="Secondary Nav:Contact Us:Contact Us"> <span>Contact Us</span></a> </div> </div> </div> </div> <div class="generic-content"> <div class="cakeContent"> <link rel="stylesheet" href="https://d23uobcja6cuc.cloudfront.net/business/etc.clientlibs/ves-cake/css.css" type="text/css"> <div id="C8a04" class="C8a04 contain indent cup full" aria-labelledby="hC8a04" role="region"> <style type="text/css"> </style> <div class="plate C8a04 full nobg "> <div class="primary top"> <h1 id="hC8a04" class="head align-left bold mw">Summary of Findings</h1> </div> </div> </div>  </div> <div class="gatePoint"> <style> .gatePoint { max-height: 1280px;} .gatePoint.closed { overflow: hidden; max-height:0; transition: max-height .5s; } #mktoGate { margin-bottom: 90px; padding-top: 12px; border-top: solid 1px #999; } #mktoGate form { max-width: 1272px !important; padding: 0 24px !important; margin: 0 auto; } #mktoGate>div { max-width: 1272px; margin: 24px auto; padding: 0 24px; } #mktoGate .mktoFieldWrap { width: 100%; } #mktoGate form label, #mktoGate form p, #mktoGate form div { font-size: 14px !important; line-height: 125% !important; } #mktoGate label[for="mktoFormOptIn"],#mktoGate label[for="zCSMKTOGDPROptIn"],#mktoGate label[for="zCSMKTOGDPROptInStatus"] { position: absolute; max-width: 20px;} #mktoGate input#mktoCheckbox_71869_0, #mktoGate select#zCSMKTOGDPROptIn, #mktoGate select#zCSMKTOGDPROptInStatus { margin-left: 12px; } #mktoGate .cta { text-align: center; margin-top:0;} #mktoGate .thanks, #mktoGate.done .intro, #mktoGate.done form, #mktoGate.done .cta, #mktoGate .confirm { display: none; } #mktoGate.done .thanks { display: block; } @media (min-width: 992px) { .mainleft div#mktoGate div.mktoFormCol { width: auto; float: none; padding: 0 12px !important } .gatePoint { max-height: 800px;} } @media (min-width: 760px) { .gatePoint div.fields { float: left; width: calc(66% - 12px); margin-right: 24px; } .gatePoint div.fields~* { display:block; margin-left: calc(66% + 12px); } } </style> <div id="mktoGate" class="cup contain"> <div class="intro"><h4>Please provide the information below to view the online Verizon Data Breach Investigations Report.</h4> </div> <form data-title=" gate" data-lang="en" data-purpose="optin" action="/business/en-gb/resources/reports/dbir/2024/summary-of-findings"> <div class="fields"> <label><span class="req">First Name:</span> <input type="text" name="FirstName" data-xg="Non_English_First_Name__c" maxlength="64" required=""/></label> <label><span class="req">Last Name:</span> <input type="text" name="LastName" data-xg="Non_English_Last_Name__c" maxlength="64" required=""/></label> <label><span class="req">E-mail:</span> <input type="email" class="email" name="Email" maxlength="64" required="" pattern=".+@.+\..+"/></label> <label><span>Organization:</span> <input type="text" name="Company" data-xg="Non_English_Company__c" maxlength="64"/></label> <label class="ps"><span>Organization type</span> <select name="Segment"> <option value="ent">Enterprise business</option> <option value="vzw">Small/medium business</option> <option value="pub">Public Sector</option> <option value="vzw">Individual</option> </select></label> <label><span class="req">Country:</span> <select name="Country" class="country _db_country" required=""> <option value="au" data-name="Australia">Australia</option> <option value="at" data-name="Austria">Austria</option> <option value="be" data-name="Belgium">Belgium</option> <option value="ca" data-name="Canada">Canada</option> <option value="cn" data-name="China">China</option> <option value="dk" data-name="Denmark">Denmark</option> <option value="fi" data-name="Finland">Finland</option> <option value="fr" data-name="France">France</option> <option value="de" data-name="Germany">Germany</option> <option value="hk" data-name="Hong Kong">Hong Kong</option> <option value="in" data-name="India">India</option> <option value="ie" data-name="Ireland">Ireland</option> <option value="it" data-name="Italy">Italy</option> <option value="jp" data-name="Japan">Japan</option> <option value="kr" data-name="Korea">Korea</option> <option value="lu" data-name="Luxembourg">Luxembourg</option> <option value="mx" data-name="Mexico">Mexico</option> <option value="nl" data-name="Netherlands">Netherlands</option> <option value="nz" data-name="New Zealand">New Zealand</option> <option value="no" data-name="Norway">Norway</option> <option value="pt" data-name="Portugal">Portugal</option> <option value="sg" data-name="Singapore">Singapore</option> <option value="es" data-name="Spain">Spain</option> <option value="se" data-name="Sweden">Sweden</option> <option value="ch" data-name="Switzerland">Switzerland</option> <option value="tw" data-name="Taiwan">Taiwan</option> <option value="us" data-name="United States">United States</option> </select></label> </div> <span class="privacy us"> <p class="notice">The information provided will be used in accordance with our terms set out in our <a href="/about/privacy/verizon-enterprise-privacy-notice">Privacy Notice</a>. Please confirm you have read and understood this Notice.</p> <p>By submitting the form, you are agreeing to receive insights, reports and other information from Verizon and affiliated companies in accordance with our <a href="/about/privacy/privacy-policy-summary/">Privacy Policy</a>. California residents can view our <a href="https://www.verizon.com/about/privacy/full-privacy-policy?scrollto=index-1#acc-item-55" target="_blank" rel="noopener">California Privacy Notice</a>.</p> <label><span class="req"><input type="checkbox" name="privacy" value="Y" required=""/> I confirm I have read and understood</span></label> <p>Verizon may wish to contact you in the future concerning its products and/or services. If you would like to receive these communications from Verizon, indicate by selecting from the dropdown menu below. Please note that you can unsubscribe or update your preferences at any time.</p> <label class="req" style="display:flex"><select name="zCSMKTOGDPROptIn" required=""><option value="">Select...</option> <option value="Yes">Yes – I wish to receive communications about Verizon products/services.</option> <option value="No">No – I do not wish to receive communications about Verizon products/services.</option> </select></label> </span> <p class="req">Indicates a required field. The content access link will be emailed to you.</p> <div class="ctas"> <button class="register primary" type="submit" itemprop="url" x-cq-linkchecker="valid" href="/business/en-gb/resources/reports/dbir/2024/summary-of-findings" target="_blank" data-title="Summary of Findings" data-type="document">Submit</button> <a class="nothanks link" target="_blank">View only</a> </div> </form> <div class="thanks"> <h2>Thank You.</h2> </div> <form class="shadow" id="mktoForm_" data-title=" gate" data-lang="en" data-purpose="optin"> </form> <div class="thanks"> <h2>Thank you.</h2> <p>You will soon receive an email with a link to confirm your access, or follow the link below.</p> <p><a class="vz-text-link link" href="/business/en-gb/resources/reports/dbir/2024/summary-of-findings" target="_blank">Download this document</a></p> </div> <div class="confirm"> <h2>Thank you.</h2> <p>You may now close this message and continue to your article.</p> </div> </div> </div> <div class="rightNav leftNav"> <link rel="stylesheet" href="https://d23uobcja6cuc.cloudfront.net/business/etc.clientlibs/ves-apps/template/leftNav/clientlibs.css" type="text/css"> <input type="checkbox" id="leftNavControl"/> <label for="leftNavControl"></label> <ul class="leftnav"> <li class="open"><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/">2024</a> <ul> <li class="active "><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/summary-of-findings/">Summary of Findings</a> </li> <li><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/introduction/">Introduction</a> </li> <li><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/helpful-guidance/">Helpful Guidance</a> </li> <li><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/results-and-analysis-intro/">Results and Analysis - Introduction</a> </li> <li><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/incident-classification-patterns-intro/">Incident Classification - Introduction</a> </li> <li><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/industries-intro/">Industries - Introduction</a> </li> <li><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/intro-to-regions/"> Introduction to Regions </a> </li> <li><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/wrap-up/">Wrap Up </a> </li> <li><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/appendix/"> Appendix</a> </li> <li><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/corrections/">Corrections</a> </li> <li><a class="vz-text-link" data-loc="Navigation:2024" href="/business/en-gb/resources/reports/dbir/2024/dbir-report/">Download the full report (PDF)</a> </li> </ul> </li> </ul> <script> try { $(document).ready(function() { if ($("div.leftNav").css("position")=="sticky") { $("div.leftNav").addClass("s"); } }); } catch (e) {} </script> </div> <div class="cakeContent"> <div id="Cffffaaff" class="Cffffaaff contain indent cup half"> <style type="text/css"> </style> <div class="plate Cffffaaff half nobg "> <div class="primary top"> <picture class="feature align-left"><source type="image/svg+xml" srcset="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/01-e06e6468-2-1-01.svg"/> <img src="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/01-e06e6468-2-1-01.svg" alt="Data Breach Investigation Report figure 1"/> </picture> </div> <div class="secondary top"> <div class="text align-left mw "> <p>Greetings! Welcome to Verizon’s 2024 Data Breach Investigations Report (DBIR). This year marks the 17th edition of this publication, and we are thrilled to welcome back our old friends and say hello to new readers. As always, the aim of the DBIR is to shine a light on the various Actor types, the tactics they utilize and the targets they choose. Thanks to our talented, generous and civic-minded contributors from around the world who continue to stick with us and share their data and insight, and deep appreciation for our very own Verizon Threat Research Advisory Center (VTRAC) team (rock stars that they are). These two groups enable us, to examine and analyze relevant trends in cybercrime that play out on a global stage across organizations of all sizes and types.</p> <p>Our ways-in analysis witnessed a substantial growth of attacks involving the exploitation of vulnerabilities as the critical path to initiate a breach when compared to previous years. It almost tripled (180% increase) from last year, which will come as no surprise to anyone who has been following the effect of MOVEit and similar zero-day vulnerabilities. These attacks were primarily leveraged by Ransomware and other Extortion-related threat actors. As one might imagine, the main vector for those initial entry points was Web applications.</p> </div> </div> </div> </div>  </div> <div class="cakeContent"> <div id="C35ad" class="C35ad contain indent cup half"> <style type="text/css"> </style> <div class="plate C35ad half nobg "> <div class="primary top"> <picture class="feature align-left"><source type="image/svg+xml" srcset="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/02-406b8170-1-01.svg"/> <img src="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/02-406b8170-1-01.svg" alt="Data Breach Investigation Report figure 2"/> </picture> </div> <div class="secondary top"> <div class="text align-left mw "> <p>Roughly one-third of all breaches involved Ransomware or some other Extortion technique. Pure Extortion attacks have risen over the past year and are now a component of 9% of all breaches. The shift of traditional ransomware actors toward these newer techniques resulted in a bit of a decline in Ransomware to 23%. However, when combined, given that they share threat actors, they represent a strong growth to 32% of breaches. Ransomware was a top threat across 92% of industries.</p> </div> </div> </div> </div>  </div> <div class="cakeContent"> <div id="C699" class="C699 contain indent cup half"> <style type="text/css"> </style> <div class="plate C699 half nobg "> <div class="primary top"> <picture class="feature align-left"><source type="image/svg+xml" srcset="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/03-c6bb8d59-2-1-01.svg"/> <img src="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/03-c6bb8d59-2-1-01.svg" alt="Data Breach Investigation Report figure 3"/> </picture> </div> <div class="secondary top"> <div class="text align-left mw "> <p>We have revised our calculation of the involvement of the human element to exclude malicious Privilege Misuse in an effort to provide a clearer metric of what security awareness can affect. For this year’s dataset, the human element was a component of 68% of breaches, roughly the same as the previous period described in the 2023 DBIR.</p> <p>In this issue, we are introducing an expanded concept of a breach involving a third party that includes partner infrastructure being affected and direct or indirect software supply chain issues—including when an organization is affected by vulnerabilities in third-party software. In short, those are breaches an organization could potentially mitigate or prevent by trying to select vendors with better security track records. We see this figure at 15% this year, a 68% increase from the previous year, mostly fueled by the use of zero-day exploits for Ransomware and Extortion attacks.<br> </p> <p>Our dataset saw a growth of breaches involving Errors, now at 28%, as we broadened our contributor base to include several new mandatory breach notification entities. This validates our suspicion that errors are more prevalent than media or traditional incident response-driven bias would lead us to believe.<br> </p> </div> </div> </div> </div>  </div> <div class="cakeContent"> <div id="C191b" class="C191b contain indent cup half"> <style type="text/css"> </style> <div class="plate C191b half nobg "> <div class="primary top"> <picture class="feature align-left"><source type="image/svg+xml" srcset="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/04-4c70a87f-1-1-01.svg"/> <img src="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/04-4c70a87f-1-1-01.svg" alt="Data Breach Investigation Report figure 4"/> </picture> </div> <div class="secondary top"> <div class="text align-left mw "> <p>The overall reporting rate of Phishing has been growing over the past few years. In security awareness exercise data contributed by our partners during 2023, 20% of users reported phishing in simulation engagements, and 11% of the users who clicked the email also reported. This is welcome news because on the flip side, the median time to click on a malicious link after the email is opened is 21 seconds and then only another 28 seconds for the person caught in the phishing scheme to enter thier data. This leads to an alarming finding: The median time for users to fall for phishing emails is less than 60 seconds.</p> </div> </div> </div> </div>  </div> <div class="cakeContent"> <div id="Cffff6d65" class="Cffff6d65 contain indent cup half"> <style type="text/css"> </style> <div class="plate Cffff6d65 half nobg "> <div class="primary top"> <picture class="feature align-left"><source type="image/svg+xml" srcset="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/05-1ee8b0a9-2-1-01.svg"/> <img src="https://www.verizon.com/business/dam/images/illustrations/reports/dbir/2024/figures/05-1ee8b0a9-2-1-01.svg" alt="Data Breach Investigation Report figure 5"/> </picture> </div> <div class="secondary top"> <div class="text align-left mw "> <p>Financially motivated threat actors will typically stick to the attack techniques that will give them the most return on investment.</p> <p>Over the past three years, the combination of Ransomware and other Extortion breaches accounted for almost two-thirds (fluctuating between 59% and 66%) of those attacks. According to the FBI’s Internet Crime Complaint Center (IC3) ransomware complaint data, the median loss associated with the combination of Ransomware and other Extortion breaches has been $46,000, ranging between $3 (three dollars) and $1,141,467 for 95% of the cases. We also found from ransomware negotiation data contributors that the median ratio of initially requested ransom and company revenue is 1.34%, but it fluctuated between 0.13% and 8.30% for 80% of the cases.</p> <p>Similarly, over the past two years, we have seen incidents involving Pretexting (the majority of which had Business Email Compromise [BEC] as the outcome) accounting for one-fourth (ranging between 24% and 25%) of financially motivated attacks. In both years, the median transaction amount of a BEC was around $50,000, also according to the FBI IC3 dataset.</p> </div> </div> </div> </div>  </div> <div class="cakeContainer"> <div id="Cb352" class="Cb352 contain cup full gapabove columns"> <style> .background.Cb352 { background-color:#000000; background-position:center; background-size:contain; } .Cb352 .scroller .items { width: 100%; } @media (max-width: 760px) {.Cb352 .scroller .items { width: 200%; }} @media (min-width: 1280px) { .Cb352 .scroller.bleed .items { width: calc(100 * 12.8px + 100vw - 1304px); } </style> <div class="background Cb352 bleed dark "> </div> <div class="primary dark" data-n="2"> <div class="columns mStack"> <div class="crow c2 full dark " data-n="2"> <div id="C192d" class="C192d contain indent cup full"> <style type="text/css"> </style> <div class="plate C192d full nobg "> <div class="primary middle empty"> <div> </div> </div> </div> </div>  <div id="C596d" class="C596d contain indent cup full"> <style type="text/css"> </style> <div class="plate C596d full nobg "> <div class="primary top empty"> </div> <div class="secondary top"> <div class="text align-right mw "> <p><br> <b><a class="nextarrow" style="position: relative;" href="https://www.verizon.com/business/en-gb/resources/reports/dbir/2024/introduction/" data-loc="Content:Summary of Findings::DBIR Introduction"><u>Introduction</u></a></b></p> </div> </div> </div> </div>  </div> </div> </div> </div>  </div> <div class="experiencefragment"> <head> </head> <div class="cakeContainer"> <div id="Cd9a2" class="Cd9a2 contain cup full gapabove gapbelow columns" data-label="Contact"> <style> .background.Cd9a2 { background-color:#000; background-position:center; background-size:contain; } .Cd9a2 .scroller .items { width: 300%; } @media (max-width: 760px) {.Cd9a2 .scroller .items { width: 300%; }} @media (min-width: 1280px) { .Cd9a2 .scroller.bleed .items { width: calc(300 * 12.8px + 100vw - 1304px); } </style> <a name="contact" data-name="contact" id="contact"></a> <div class="background Cd9a2 rounded flush dark "> </div> <div class="primary dark" data-n="3"> <div class="columns mStack"> <div class="crow c1 full dark " data-n="3"> <div id="Cfffff37d" class="Cfffff37d contain indent cup five reverse" aria-labelledby="hCfffff37d" role="region"> <style type="text/css"> .background.Cfffff37d { background-color:unset; background-position:left bottom; background-size:contain; } .Cfffff37d>.primary>.background, .Cfffff37d>.secondary>.tabs::before { background-color:#000; } .Cfffff37d>.secondary>.background, .Cfffff37d>.secondary>.tabs { background-color:#1b1c1d; } </style> <div class="background Cfffff37d rounded "> </div> <div class="plate Cfffff37d five reverse "> <div class="primary dark hasbg top"> <div class="background rounded "> </div> <h2 id="hCfffff37d" class="head align-left thin mw">Let’s<br /> connect</h2> <div class="text align-"> <div class="phone2 contact"> <select class="phonecountry"> <option value="+54 11 4515-6100">Argentina</option> <option value="+61-2-9434-5000">Australia</option> <option value="+43 1 727 14 1111">Austria</option> <option value="+32 2 400 80 00">Belgium</option> <option value="+55 11 3318-4000">Brazil</option> <option value="+1 800 463 8123">Canada</option> <option value="+56.2.754.5500">Chile</option> <option value="+86-21-2330-3600">China</option> <option value="+57 1 376 5566">Colombia</option> <option value="+50 7 213-3070">Costa Rica</option> <option value="+45 4386 9000">Denmark</option> <option value="+46 8 5661 7000">Finland</option> <option value="+33 1 53 75 82 00">France</option> <option value="+49 231 9720">Germany</option> <option value="+852-2233-6288">Hong Kong</option> <option value="+912-2-6648-1661">India</option> <option value="+353 01 413 1250">Ireland</option> <option value="+39 02 36 00 11">Italy</option> <option value="+81-3-5293-9000">Japan</option> <option value="+82-2-6281-7900">Korea</option> <option value="+32 2 400 80 00">Luxembourg</option> <option value="+(52 55)9000-7900">Mexico</option> <option value="+31 20 711 2000">Netherlands</option> <option value="+64-9-306-8911">New Zealand</option> <option value="+47 24 13 04 00">Norway</option> <option value="+50 7 213-3070">Panama</option> <option value="+34 91 414 5700">Portugal</option> <option value="+65-6248-6600">Singapore</option> <option value="+34 91 414 5700">Spain</option> <option value="+46 8 5661 7000">Sweden</option> <option value="+41 44 580 80 11">Switzerland</option> <option value="+886-2-2723-8877">Taiwan</option> <option value="+44 118 905 5000">United Kingdom</option> <option selected>United States</option> <option value="+58-212-285 2833">Venezuela</option> </select> <svg width="12" height="12" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path vector-effect="non-scaling-stroke" stroke="#fff" fill="none" d="M22,7L12,17L2,7"/></svg> <style> select.phonecountry { border:none; background:none; color:inherit; text-decoration: underline; cursor:pointer;appearance:none;position:relative; padding-right: 16px;} select.phonecountry option { background: #fff ;color: #000; } select.phonecountry+svg { vertical-align: middle; margin-left: -16px; } </style> <script type="text/javascript"> (function(){ function stfn(e,tfn) { if (e) { e.setAttribute("href","tel:"+tfn); e.innerHTML=e.innerHTML.replace(/\+?[\d$][\d\-\.A-Z\ \($]+/,tfn.replace(/\+1/,"")); } } const s = document.querySelector("select.phonecountry"); s.addEventListener("change",function(e){ stfn(document.getElementById("lcTFN"),s.value); stfn(document.querySelector(".secondarynav a.contact-us[href^=tel]"),s.value); s.blur(); }); s.querySelector("option:not([value])").setAttribute("value",digitalData.pageInfo.tfn); })(); </script> </div> </div> </div> <div class="secondary dark hasbg bottom empty"> <div class="background rounded "> </div> <div> </div> </div> </div> </div>  <div id="Cffff56e1" class="Cffff56e1 contain cup full gap gapabove columns"> <style> .background.Cffff56e1 { background-color:rgba(255,255,255,0); background-position:center; background-size:contain; } .Cffff56e1 .scroller .items { width: 100%; } @media (max-width: 760px) {.Cffff56e1 .scroller .items { width: 300%; }} @media (min-width: 1280px) { .Cffff56e1 .scroller.bleed .items { width: calc(100 * 12.8px + 100vw - 1304px); } </style> <div class="background Cffff56e1 flush light "> </div> <div class="primary light" data-n="3"> <div class="columns mStack"> <div class="crow c3 full gap light " data-n="3"> <div id="Cffff3f58" class="Cffff3f58 contain indent cup full"> <style type="text/css"> .background.Cffff3f58 { background-color:#F6F6F6; background-position:center; background-size:contain; } </style> <div class="background Cffff3f58 rounded light "> </div> <a class="full vz-text-link" href="tel:8772977816" data-loc="Content:Link:DBIR:Contact:Call us" aria-label="Call us"></a> <div class="plate Cffff3f58 full "> <div class="primary light top"> <picture class="icon headS rounded align-left"><source type="image/svg+xml" srcset="https://www.verizon.com/business/dam/images/icons/devices/support.svg"/> <svg id="ee26bdc4-7664-4c98-a495-cc9f16e1f58e" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 21.6 21.6"><path d="M19.8,10.75h0a9,9,0,1,0-9,9.07V18.68a7.9,7.9,0,0,1-7-4.2l2.35-.41L5.4,9.61,3,10a7.88,7.88,0,0,1,15.68,0L16.26,9.6l-.78,4.47,3.62.64.69-3.91h0Zm-15.31.16.39,2.25-1.41.25-.39-2.25Zm13.7,2.49-1.41-.24.4-2.25,1.4.25Z"/></svg> </picture> <div class="text align-left mw "> <p>Call Sales<br> <a class="bodyMD link" id="lcTFN" href="/business/en-gb/contact/" style="font-weight: normal; color: #000;">877-297-7816</a></p> </div> <div class="ctas align-left"></div> </div> </div> </div>  <div id="C44f2" class="C44f2 contain indent cup full"> <style type="text/css"> .background.C44f2 { background-color:#F6F6F6; background-position:center; background-size:contain; } </style> <div class="background C44f2 rounded light "> </div> <a class="full vz-text-link" href="/business/en-gb/contact/request-consultation/" data-title="Request a sales consultation" data-loc="Content:Link:DBIR:Contact:Contact Us" aria-label="Contact Us"></a> <div class="plate C44f2 full "> <div class="primary light top"> <picture class="icon headS rounded align-left"><source type="image/svg+xml" srcset="https://www.verizon.com/business/dam/images/icons/devices/Phone-data.svg"/> <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 21.6 21.6"><path d="M13.3623,11.25476h-1.125V7.27917h1.125ZM15.8407,1.8v18H5.75928V1.8ZM14.7157,16.665H11.85449v1.09668H9.74561V16.665H6.88428v2.01H14.7157Zm0-13.74H6.88428V15.54H14.7157ZM11.36279,8.27917h-1.125v3h1.125Zm-2.00049,1H8.2373v1.97559h1.125Z"/></svg> </picture> <div class="text align-left mw "> <p>Have us contact you<br> <a class="bodyMD link" href="/business/en-gb/contact/request-consultation/" style="font-weight: normal; color: #000;">Contact Us</a></p> </div> <div class="ctas align-left"></div> </div> </div> </div>  <div id="C9f8f" class="C9f8f contain indent cup full"> <style type="text/css"> .background.C9f8f { background-color:#F6F6F6; background-position:center; background-size:contain; } </style> <div class="background C9f8f rounded light "> </div> <a class="full vz-text-link" href="tel:844-825-8389" data-loc="Content:Link:DBIR:Contact:Call us" aria-label="Call us"></a> <div class="plate C9f8f full "> <div class="primary light top"> <picture class="icon headS rounded align-left"><source type="image/svg+xml" srcset="https://www.verizon.com/business/dam/images/icons/devices/support.svg"/> <svg id="ee26bdc4-7664-4c98-a495-cc9f16e1f58e" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 21.6 21.6"><path d="M19.8,10.75h0a9,9,0,1,0-9,9.07V18.68a7.9,7.9,0,0,1-7-4.2l2.35-.41L5.4,9.61,3,10a7.88,7.88,0,0,1,15.68,0L16.26,9.6l-.78,4.47,3.62.64.69-3.91h0Zm-15.31.16.39,2.25-1.41.25-.39-2.25Zm13.7,2.49-1.41-.24.4-2.25,1.4.25Z"/></svg> </picture> <div class="text align-left mw "> <p>Call for Public Sector<br> <a class="bodyMD link" href="/business/en-gb/contact/" style="font-weight: normal; color: #000;">844-825-8389</a></p> </div> <div class="ctas align-left"></div> </div> </div> </div>  </div> </div> </div> </div>  <div id="Cffff654b" class="Cffff654b contain indent cup full"> <div class="plate full Cffff654b"> <div class="fullcontent"> <div class="text align-null dim mw "> <div class="background flush"> </div> <div><p class="letslinks">Already a customer?   <a class="link vz-text-link" href="https://mblogin.verizonwireless.com/account/business/signin">Log in</a> <a class="link vz-text-link" href="/business/en-gb/support/">Explore support</a></p> </div> </div> </div> </div> </div> </div> </div> </div> </div>  </div> <div class="hardCode"> <style type="text/css">p.letslinks a.link { display:inline-block; margin-right: 40px; font-weight: normal;white-space:nowrap} #Cd9a2, #Cd9a2 .contain { max-width: 1272px; } @media (max-width: 760px) { #Cd9a2 .text { margin-top:0; clear:none; } #Cfffff37d .plate>.primary { padding-left: 36px; padding-bottom:0;} } p.letslinks a.link:after { opacity:0.7; } .chatTile { position: absolute; top:0; right:0; bottom:0; left:0; } .chatTile:empty { background:#1b1c1d; } #Cd9a2 h2 { margin-top: 16px; } #Cd9a2 h2+.text { position: absolute; top:16px; } #Cd9a2 .ctas, #Cffff9b09 .text>p { margin-bottom:0 } #Cd9a2 .crow.gap { padding-bottom:0; } #Cfffff37d .secondary { min-height: 154px; } #Cfffff37d .background { background-position: center bottom; background-size: contain; background-repeat: no-repeat; } @media (min-width: 760px) { #Cfffff37d .plate>.primary { background-color:#1b1c1d; color:#fff; border-radius: 12px 0 0 0; min-height: 205px; padding-top: 42px;} #Cfffff37d .plate>.secondary .background { border-radius: 0 12px 0 0; } } @media (min-width: 992px) { #Cfffff37d .plate>.primary { min-height: 247px; } } </style> <script type="text/javascript">if (digitalData.pageInfo.tfn) { const lc=document.getElementById("lcTFN"); lc.replaceChildren(digitalData.pageInfo.tfn); lc.closest(".plate").previousElementSibling.setAttribute("href","tel:"+digitalData.pageInfo.tfn); } document.addEventListener("DOMContentLoaded",function(){ const bg = document.querySelector("#Cfffff37d .secondary>.background"); if (bg) { const path = "/business/dam/images/photography/contact/contact-"; const imgs = ["randi-h", "john-w", "erik-f", "maura-h"]; bg.style.backgroundImage = "url("+path+imgs[Math.floor(Math.random()*imgs.length)]+".jpg)"; } });</script> </div> </div> </div> <script src="/business/etc.clientlibs/ves-cake/js.js"></script> <div class="disclaimer"> <div class="disclaimer"></div> </div> </div> <script src="/business/etc.clientlibs/ves/clientlibs/main.js"></script> <script type="text/javascript"> if (typeof newrelic == 'object' && typeof(pagequery) == "undefined") { newrelic.setCustomAttribute('querystring', location.search); } </script> <style> #stitslide {display:none;width:300px;border:2px solid #000;position:fixed;bottom:0;left:0;margin-left: -300px;padding:0;background-color:#000;border-top-right-radius: 12px;box-shadow: 2px -2px 20px #999;z-index:100;} #stitslide div#c {padding:20px;} #stitslide.dark * {color: #fff;outline-color: #ccc; } #stitslide .button {display: block;position: relative;width: auto;min-width: 96px;padding: 10px 24px;margin: 6px 12px 6px 0;outline-offset: 3px;border: solid 1px #000;border-radius: 24px;font-size: 17px;text-align: center;text-decoration: none;font-weight: bold;font-family:NHGeDS,"NeueHaasGroteskDisplayBold",NeueHaasGrotesk,Arial,Sans-Serif;color: #000;background-color: #fff;border-color: #fff;} #stitslide .close {float:right;display:inline-block;padding:2px 2px;width:36px;height:36px;} #stitslide .close svg {display: block;height: 100%;overflow: visible;position: relative;width: 36px;fill:#fff;} </style> <div id="vz-gf20"></div> <script type="text/javascript"> function FIOSshow() { if (typeof objGeo !== 'undefined' && objGeo != null) { if (objGeo["svc"] == "fios") { $('.gnav20 .gnav20-footer-list>li>a[href^="https://www.verizon.com/business/forms/fios-subscribe/"]').addClass("fiosshow"); } } } function GNfooter() { var t=document.getElementById("vz-gf20"); if (t && !t.children.length) { if (typeof(loadFooter)!="undefined") { loadFooter("smbmeganav\u002Den\u002Dgb"); } else if (typeof(gnav20)!="undefined" && typeof(gnav20.loadFooter)!="undefined") { gnav20.loadFooter("smbmeganav\u002Den\u002Dgb"); } } setTimeout(FIOSshow,3000) } if (typeof($)!="undefined") { $(window).on("load",GNfooter); } else { setTimeout(GNfooter,3000); } </script> <div class="server" style="position:absolute; opacity:0" aria-hidden="true">AWSFE2</div> </body> </html>

CINXE.COM

DBIR Report 2024 - Summary of Findings | Verizon