The document discusses common types of data breaches and targets. It finds that POS intrusions made up 29% of all breaches, with weaknesses in remote access security and passwords being the most commonly exploited factors. The top three most affected industries were found to be public sector, information, and financial services. Retail saw the highest rate of POS-related breaches at 91% of accommodation compromises, 73% of entertainment compromises, and 70% of retail compromises.

1. Criminals targeting POS assets most typically took advantage of:
Weak remote
access security
44%
Weak
passwords
50%
Misconfiguration
6%
of compromises
Data Breach Targets Revealed
With the annual number of data breaches and compromised records growing,
this infographic looks at the types of data breach most commonly being conducted
and what industries are frequently being targeted.
*2015 Cost of Data Breach Study: Global Analysis by Ponemon Institute LLC +
2015 Data Breach Investigations Report by Verizon ^2015 Trustwave Global Security Report
Cyber Attacks Have Increased in Frequency
47%
of all
breaches in this
year’s Ponemon*
study were caused
by malicious or
criminal attacks,
29%
by system
glitches
25%
by human
error
!
Verizon+
noted the top three
industries affected are the same
as previous years:
The four most common types of data breach
incident+
are:
1. Public Sector
2. Information
3. Financial Services
POS
Intrusions
29%
Crimeware
19%
Cyber-
Espionage
18%
Insider
Misuse
11%
of all breaches
!
Phishing Threats Continue+
Malware Still Popular+
of recipients now open
phishing messages and
click on attachments
Data from the Anti-Phishing Working Group
suggests over 9,000 domains and nearly
50,000 phishing URLs tracked each month
across the Group’s members
malware events
occur every second
5
801
Average of
350
malware events per week
in retail industry and
per week in financial
services industry
23%
11%
Securing the Point-of-Sale
The point-of-sale (POS) was the most frequent cause of data disclosure+
for these industries:
91%of all
breaches 73%of all
breaches 70%of all
breaches
Accommodation Entertaiment Retail
of compromises
Trustwave investigated^
were within retail
of POS system
compromises^ were
due to weak remote
access security
of compromises were
investigated at the POS^
of breaches in the
retail industry were of
eCommerce assets and
were of POS assets^
43%
44%
40%
64%
27%
In small organizations+
the POS
device is most often directly
targeted by guessing or brute-
forcing the passwords
In larger organizations+
the data
breach is typically caused by a multi-step
attack with a secondary system breach before
the POS system is attacked
Store employees+
are often specifically
targeted by criminals
and duped into
providing the
password needed
for remote access
to the POS
Contributing Factors^