75% of insider breaches are accidental

Approximately 25% of insider threats are hostile with the remaining 75% due to accidental or negligent activity, according to NTT Security.

This graph represents the top targeted industries based on attack volume in comparison to Q2’17. Percentages represent the overall attack volume per industry in that quarter.

Insider threats can put an organization at risk without even knowing it. In fact, the 2017 Global Threat Intelligence Center (GTIC) Quarterly Threat Intelligence Report indicates that 30% of all insider threats put an organization at risk without being aware of the vulnerability.

“Whether it’s an accidental insider threat, where an employee sends sensitive documents to a competitor‘s email or a negligent insider threat, where an employee downloads unauthorized software and spreads a virus through the company, organizations must have a cybersecurity plan in place to minimize these risks,” said Steven Bullitt, Vice President Threat Intelligence & Incident Response, GTIC, NTT Security.

“The GTIC Quarterly Threat Intelligence Report documents that in instances when organizations do not have a proactive cybersecurity plan in place, the consequences can be devastating. In fact, NTT Security has seen damages due to insider breaches reach more than $30 million USD. Even in organizations that have well-defined incident response plans, they often don’t provide adequate remediation provisions for insider breaches, leaving the organization less prepared to react quickly.“

This graph represents the attack volume differences for attack categories across all industries between Q2 ’17 and Q3 ’17.

Key findings

A summary of other key findings in the Q3 GTIC Quarterly Threat Intelligence Report include:

• A notable increase in the number of security events during Q3 ’17 – up 24 percent from Q2 ‘17
• The finance industry had the most detections for malicious activity in Q3 ‘17 – representing 25% of all cybersecurity attacks
• Rounding out the top five targeted industries were: manufacturing at 21%, business services at 16%, health care at 13% and technology at 12%
• Phishing campaigns and malware infections both increased by more than 40% over Q2 ‘17
• Attacks from China moved up from the number three spot in Q2 ‘17 to number two in Q3 ‘17
• As an attack source, India also made a huge jump from outside the top 10 up to number three, most likely due to outside actors leveraging vulnerable and/or compromised infrastructure.