Between November 2022 and October 2023, the education saw 860 data breach cases caused by system intrusion. Basic web application attacks resulted in 161 data breaches in the finance sector. Social engineering attacks caused 158 data breaches in the construction sector.

Between November 2022 and October 2023, 97 percent of compromised information through lost and stolen assets was personal data. Furthermore, 46 percent of privilege misuse incidents occurred internally.

In 2023, software/API vulnerabilities accounted for 38.6 percent of initial access vectors in cyberattacks, up by around 10 percent compared to 28.2 percent in 2022. Previously compromised credentials represented 20.5 percent of attacks, while social engineering and phishing were responsible for 17 percent of cyberattacks in the examined year.