DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

2019 Verizon Data Breach Investigations Report (DBIR) is Out

Posted on May 8, 2019 by Dissent

This year, Verizon’s DBIR  is based on data from 41,686 security incidents and 2,013 data breaches provided by 73 data sources, both public and private entities, spanning 86 countries worldwide.

You can read the Executive Summary here, or read the full report here.

There are some data in it that may raise an eyebrow or two, especially for the Healthcare sector. In their key takeaways, for example, they write:

Healthcare

Frequency:
466 incidents, 304 with confirmed data disclosure

Top 3 patterns:
Miscellaneous Errors, Privilege Misuse and Web Applications represent 81% of incidents within Healthcare

Threat actors:
Internal (59%), External (42%), Partner (4%), and Multiple parties (3%) (breaches)

Now if you have been following along on this site and reading Protenus’s reports, you’ll know that on a monthly and extended basis, external/hacking incidents out-number internal incidents by a lot. And business associate/third-party incidents account for more than 4% of incidents.  Are DBIR’s figures on external incidents lower than our figures because of the issue that in most ransomware reports, there is no certainty that data were exposed or accessed? It seems that way, as they write:

Most ransomware incidents are not defined as breaches in this study due to their lack of the required confirmation of data loss. Unfortunately for them, Healthcare organizations are required to disclose ransomware attacks as though they were confirmed breaches due to U.S. regulatory require­ments. This compulsory action will influence the number of ransomware incidents associated with the Healthcare sector. Acknowledging the bias, this is the second straight year that ransomware incidents were over 70 percent of all malware outbreaks in this vertical.

Actor motives:
Financial (83%), Fun (6%), Convenience (3%), Grudge (3%), and Espionage (2%) (breaches)

Data compromised:
Medical (72%), Personal (34%), Credentials (25%) (breaches)

Category: Commentaries and AnalysesOf Note

Post navigation

← Ongoing Attack Stealing Credit Cards From Over A Hundred Shopping Sites
Spectrum Health Lakeland notifies patients after billing vendor breach →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Alleged Geisinger hacker will defend himself pro se.
  • Tallahassee Memorial Healthcare reveals it was also impacted by Cerner/Legacy Oracle cyberattack
  • Hospital cyberattack investigation complete, no formal review needed
  • Largest Ever Seizure of Funds Related to Crypto Confidence Scams
  • IMPACT: 170 patients harmed as a result of Qilin’s ransomware attack on NHS vendor Synnovis
  • DOJ’s Data Security Program: Key Compliance Considerations for Impacted Entities
  • UBS reports data leak after cyber attack on provider, client data unaffected
  • Scania confirms insurance claim data breach in extortion attempt
  • Cybersecurity takes a big hit in new Trump executive order
  • Episource notifying 5.4 million patients of cyberattack in January

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • DOJ’s Data Security Program: Key Compliance Considerations for Impacted Entities
  • 23andMe fined £2.31 million for failing to protect UK users’ genetic data
  • DOJ Seeks More Time on Tower Dumps
  • Your household smart products must respect your privacy – including your air fryer
  • Vermont signs Kids Code into law, faces legal challenges
  • Data Categories and Surveillance Pricing: Ferguson’s Nuanced Approach to Privacy Innovation
  • Anne Wojcicki Wins Bidding for 23andMe

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.