Page 8 - BLI Annual Report 2016
P. 8

BREACH LEVEL INDEX
TYPES OF DATA COMPROMISED
Identify Theft Tops as Leading Mode of Attack
Once again identity theft was the most common type of attack used in data breaches in 2016, the third straight year that has been the case. Identity theft was used for 1,050 data breaches, well over half of all the incidents and accounting for 58.6% of the total.
The number of breaches was
up slightly from 1,004 in 2015. However, a substantial decrease was in the number of records stolen via identity theft in 2016: nearly 400 million (28.4% of the total), down 25.8% from 526.6 million in 2015. Given this trend that has developed with identify theft as the leading attack model for breaches, it’s clear that companies are not doing enough to address this threat.
Criminals naturally gravitate
to where the money is, so it’s
not surprising that the next most common form of data breach in 2016 was  nancial access. Attackers launched 330 such breaches during the year, accounting for 18.4% of the total.
8
It’s interesting to note that these types of attacks were down by 20.1% from 413 in 2015. But the number of data records stolen increased by 32.8%, from 4.1 million to 5.4 million.
Next on the list of most common types of breaches is account access, which was the method for 190 breaches in 2016 (10.6%).
Nuisance attacks were responsible for 143 data breaches in 2016, accounting for 8% of the total and up dramatically (101.4%) from the 71 attacks the year before. Even more dramatic was the rise in records stolen. These attacks led to the theft of almost 241 million records (17.5% of the total) in 2016, compared with just 15.3 million in 2015.
NUMBER OF BREACH INCIDENTS BY TYPE IN 2016
EXISTENTIAL DATA
79 INCIDENTS (4%)
IDENTITY THEFT
NUISANCE
1,050 INCIDENTS (59%)
143 INCIDENTS (8%)
ACCOUNT ACCESS
190 INCIDENTS (11%)
FINANCIAL ACCESS
330 INCIDENTS (18%)
1,792 TOTAL BREACHES
Source: BREACHLEVELINDEX.COM January 2016 to December 2016
These account access breaches were down slightly from 2015’s total of 196 attacks. And while
the number of breaches was relatively small, they impacted an extraordinary number of records, 738 million. That represents more than half (53.6%) of all the records in data breaches in 2016, and is up 336% from 169 million in 2015.
Finally, existential data was the cause of 79 data breaches in 2016 (4.4%), down 56.6% from 182 data breaches in 2015. These attacks led to the loss of 3.1 million data records (less than 1%), and were down 87.5% from 2015.


































































































   6   7   8   9   10