31% of breaches now start with software vulnerabilities.

48% of all breaches now involve ransomware.

Only 23% of third-party organizations fully remediated missing or improperly secured multifactor authentication (MFA) on their cloud accounts, with 50% of all findings being resolved within a month.

67% percent of users are using non-corporate accounts on their corporate devices to access AI services

88% of Q1 2026 automotive vulnerabilities require Low Attack Complexity

Ethernet represented over 25% of all automotive attack vector entries in Q1 2026

BEAST threat actor leaked 700 GB of internal data from a large Chinese automotive group in late February 2026

2024 SafePay ransomware breach at a global BPO provider exposed nearly 17,000 employees and customers of a major commercial vehicle manufacturer, disclosed in January 2026 after a 14-month notification delay

Incransom ransomware group published a 200 GB leak from a Tier-1 electronics component supplier in January 2026

An automotive parts marketplace database with over 7.7 million records was exposed via a misconfigured Elasticsearch instance in January 2026

86% of organizations say vulnerability remediation is a critical part of their security strategy.

3.7 million of the 12.4 million records exposed in the ShinyHunters automotive marketplace breach were previously unseen in other breaches

Healthcare accounted for 72 publicly disclosed ransomware attacks (27%) in Q1 2026.

Only 34% of organizations maintain a formal AI model inventory.

Local Shell was the most frequent attack vector in Q4 2025, representing over 62% of total automotive entries

Ethernet and Wi-Fi combined accounted for more than 18% of Q4 2025 automotive attack vectors

In-vehicle and Virtualization target types accounted for 95%+ of Q4 2025 automotive vulnerabilities

14 different attack methods observed in Q4 2025 automotive vulnerabilities

Breaches with third-party involvement have increased by 60%.

Shadow AI is now the third most common non-malicious insider action detected in Verizon's data loss prevention (DLP) dataset in 2025