1.
LEARN MORE
12% 48%
MOST
ATTACKED
2nd
MOST
ATTACKED
Financial services
Information and communications
Manufacturing
Retail
Healthcare
1
2
3
4
5
53%
3%
5%
7%
46%
5%
1%
4%
2%
25%
42%
96%
91%
91%
29%
Fewer More
Industry sector
%
M
alicious insider
%
Inadvertent actor
%
Outsiders
IBM X-Force Threat Intelligence Index 2017
Monitored security
is superior security
Around the globe, organizations experienced a
record number of security leaks and attacks in
2016. But did you know that attacks and incidents
actually decreased in 2016 for clients monitored by
IBM® Security Services? Here are key findings from
the 2017 IBM X-Force® Threat Intelligence Index.
IBM-MONITORED SECURITY CLIENTS
FARED BETTER THAN OTHERS IN 2016.
Around the globe, other
organizations weren’t so lucky.
4 billion+ records leaked—more than double the
figures from 2014 and 2015 combined
10,000+ vulnerabilities—a record-breaking volume
WHO GOT ATTACKED?
Financial services
was the most-attacked
industry.
Some industries were hit harder with insider attacks—others
with outsiders.
Wouldn’t it be great to see security threats go down instead
of up this year? IBM Security offers the expertise you need to
help guard against security threats, including around-the-clock
security monitoring and reporting, to help you improve your
security and compliance posture.
© Copyright IBM Corporation 2017. All Rights Reserved. IBM, the IBM logo, ibm.com, and X-Force are trademarks or registered trademarks of International
Business Machines Corporation in the United States.
SE912361-USEN-00
Attacks down Security incidents down
Attack:
Malicious activity attempting
to collect, disrupt, deny,
degrade or destroy information
or system resources.
Incident:
A security event that has
been reviewed by IBM Security
analysts and deemed worthy
of deeper investigation.
Monitoring key industries reveals rich data on attack trends.
Here’s what X-Force learned about 2016:
Information and
communications took
second place for
most-attacked.
Healthcare, manufacturing and retail
experienced a majority of injection attacks.
SQL injection (SQLi) and operating system command injection
(OS CMDi) attacks were the most common method of
attack across all five sectors.
WHO WERE THE ATTACKERS?
Whether malicious or
inadvertent, insider attacks
loomed large in financial
services and healthcare.
Outside attackers were the
most common culprits in
retail, and in information and
communications.
FIND OUT HOW IBM SECURITY CAN HELP.