This document summarizes the key findings of a 2009 data breach investigations report conducted by Verizon Business. It provides quick facts about the 90 data breach investigations in 2008 that were included in the report. Some of the main highlights included that roughly 20% of cases involved more than one breach and nearly half of the cases had common patterns. The document outlines several findings, conclusions, and countermeasures including the need to align processes with policies, secure business partner connections, create incident response plans, and improve user access reviews and application testing.