Verizon recently published its 16th annual Data Breach Investigations Report (DBIR), which analyzed 16,000 security incidents and 5,200 breaches. The report found that ransomware incidents continue to be a major issue and are becoming increasingly costly for organizations.
Overview of Verizon’s 16th Annual Data Breach Investigations Report (DBIR)
The DBIR provides insights into the latest cybersecurity threats and trends. This year’s report revealed that ransomware attacks continue to be a significant threat to organizations, with the number of attacks increasing dramatically in the past two years. The report also highlighted the importance of the human element in cybersecurity, as three-quarters of analyzed breaches involved human interaction.
Ransomware incidents: median cost has more than doubled
One of the most concerning findings of the DBIR is the increasing cost of ransomware incidents. The median cost of ransomware incidents has more than doubled over the past two years, reaching $26,000. This indicates that ransomware attacks are becoming more sophisticated and effective at compromising organizations’ systems and data.
Losses and recovery costs of ransomware incidents
Although losses were only reported in 7% of cases, victims still lost between $1 and $2.25 million. In addition to the initial ransom demand, the overall costs of recovering from a ransomware incident, including system restoration, lost productivity, and reputational damage, are increasing. This is despite the fact that ransom amounts are typically lower than the overall costs of recovery.
Ransomware accounts for 24% of analyzed cybersecurity incidents
Ransomware continues to be a major issue for organizations, accounting for 24% of cybersecurity incidents analyzed in the DBIR. This makes it the second most common form of malware, after phishing. The report notes that the number of ransomware attacks has been higher in the past two years than in the previous five years combined.
Increase in the Number of Ransomware Attacks in Recent Years
The DBIR highlights the fact that the number of ransomware attacks has been increasing rapidly in recent years. This is due to a variety of factors, including the availability of cheap ransomware kits on the dark web, a growing number of attackers using ransomware as the primary means of attack, and the increasing sophistication of ransomware attacks.
The DBIR report emphasizes the importance of the human element in cybersecurity. Approximately three-quarters of the analyzed breaches involve human interaction, such as clicking on a phishing email or falling for a social engineering scam. This highlights the need for ongoing cybersecurity training and education for employees at all levels of an organization.
Senior leadership as a growing cybersecurity threat
Another concerning trend highlighted in the DBIR is the growing threat posed by senior leadership. The report found that senior executives are increasingly targeted by cyber attackers, with business email compromise being a popular tactic. This underscores the need for organizations to implement strong cybersecurity protocols and ensure that senior leadership is fully aware of the risks and takes appropriate action to mitigate them.
The article states that stolen credentials have been used in almost half of all breaches. This report also highlights the continued success of credential theft. It underscores the importance of using strong unique passwords and implementing multi-factor authentication to an organization’s systems. Additionally, it’s important to monitor user accounts for any suspicious activity.
The Verizon DBIR shows that ransomware continues to be a major threat to organizations, with increasing costs associated with these types of attacks. The report also highlights the importance of ongoing cybersecurity training for employees, the need for strong security protocols at all levels of an organization, and the growing threat posed by senior leadership. Organizations must remain vigilant and proactive in their cybersecurity efforts to prevent and mitigate successful attacks.