53% of insider incidents involved customer records.

47% of insider incidents involved personal information or Personally Identifiable Information (PII).

40% of insider incidents involved business-sensitive financial and strategic information.

Nearly 29% of Managed Service Providers (MSPs) have experienced a preventable client data loss event that could have been avoided with a dedicated backup solution.

37% of organizations reported detecting between 6 and 20 insider-related data loss incidents in the past 18 months.

36% of insider incidents involved user credentials.

29% of insider incidents involved Intellectual Property (IP).

13% of insider incidents involved credit cardholder data.

The amount of data most organizations got back after paying a ransom was 51–75%.

92% of organizations still lost data after paying a ransom.

8% of organizations got all their data back after paying a ransom.

96% of healthcare organizations researched had at least two data loss or exfiltration incidents involving sensitive and confidential healthcare data in the past two years.

On average, healthcare organizations experienced 18 data loss or exfiltration incidents in the past two years.

36% of healthcare organizations that experienced data loss or exfiltration incidents say it caused delays in procedures and tests that resulted in poor outcomes.

55% of healthcare organizations say data loss or exfiltration incidents impacted patient care.

54% of healthcare organizations that experienced data loss or exfiltration incidents say it increased the mortality rate.

5% of scam victims reported data loss.

Among scam victims, 11% lost personal information.

In the U.S., 80% of CISOs express concern over potential customer data loss via public GenAI platforms.

Despite near-universal adoption of Data Loss Prevention (DLP) tools, one-third say their data remains inadequately protected.