Top 5 Industries attracted by threat actors

1. Verizon's DBIR
A l o o k i n t o e a c h i n d u s t r y
TOP 5 Industries attracted
by threat actors
Healthcare
Finance
Manufacturing
Information
Public Administration
Industry Breaches/
Incidents
65%
29%
41%
6%
5%
Financially motivated attacks from External
and Internal actors are seen in almost all
these industries
Personal data has been compromised in most of
the breaches. In some industries there have been
other compromised data as well.
Healthcare Manufacturing Information Public Administration
Medical data Credentials Credentials & OtherCredentials
Web Applications and Errors (like Misdelivery or
Misconfiguration) are the most used patters that
led to breaches
Professional, Scientific and Technical
Educational Services
326B r e a c h e s
228B r e a c h e s
B r e a c h e s
B r e a c h e s
B r e a c h e s
B r e a c h e s
Retail
146
Arts, Entertainment and Recreation98
Accommodation & Food Services
Transportation & Warehousing
Other Services
92
66
67
Mining, Quarrying, and Oil & Gas
Extraction + Utilities
43
Construction
25
Real Estate and Rental and Leasing
33
B r e a c h e s
B r e a c h e s
B r e a c h e s
B r e a c h e s
. . .
Lawyers
Architects
Consulting
firms
...
They attract attackers because of the vast
personal customer data they contain.
Web Application, Misconfiguration and
Misdelivery Errors have helped attackers get
to their goal.
Phishing and Pretexting are commonly used
tactics.
A lot of Phishing attacks and what is worse most of
them not reported - and that requires security
awareness training for the personnel.
Most used Malware in this industry has been
Ransomware, and attackers have used Web
Applications and several Errors to get their goal.
It’s Retail! All that Payment data - and of course
they’ll get financially motivated attacks
More precisely 99% financially motivated!
Thinking about e-commerce application, of course,
Web applications will have the lead as attack
patters.
The highest rate of DDoS attacks this year
surprisingly, is not the Information sector, rather
here.
Of course, web applications were a way to attack
these sectors as well, apart from social engineering
and Errors.
This Industry holds a lot of valuable Payment data,
thus it attracts financially motivated attackers.
Although Point-of-Sale attacks are in the top 3
patters, they have drastically decreased from previous
years. Other attack patters are Crimeware and, of
course, Web Applications.
In Services like Personal, Repair, Non-profit Religious
Social benefit organizations Personal data and
Credentials are the targeted data to be compromised.
Financial motives are seen in most of the breaches.
However, there are a few breaches motivated
by Espionage, but less than the previous year.
Web Application along with Misconfiguration Errors
have caused the highest number of breaches in this
industry. Not to mention phishing which has been
active in most of the industries.
Personal data have been compromised mostly, as well
as credentials.
Not only Financially motivated but also Espionage
motivated attacks.
Apart from other patters, web applications and
cyber-espionage made it to the top 3.
Web Applications and employee Errors have led
External threat actors into getting Personal and
even Internal data in this industry.
Most of the attacks had financial motives, but
espionage is right after it.
Mostly financially motivated attacks performed by
organized criminal groups.
Personal data and credentials compromised with
those attacks.
Phishing, web application and crimeware were the
top three attack patterns
www.socradar.io