Report Says That Q1 Data Breach Reports Up 90%, Supply Chain Attacks Triple

According to the Identity Theft Resource Center (ITRC) Q1 Data Breach Analysis, the first three months of 2024 saw a 90% increase in publicly reported “data compromises” (841) as compared to Q1 2023 while the total victim count decreased 72% annually and 81% from the previous quarter.

The main cause of these incidents was cyber-attacks which accounted for about 75% of breaches and almost 40% of victims. 

Supply chain attacks continue to challenge US organizations with the number of companies impacted by these threats more than tripling last quarter, compared to Q1 2023. Fifty new supply chain breaches impacted 243 organizations and around 7.5 million victims, compared to 73 organizations and 11.4 million victims in Q1 2023.

Financial services was the hardest hit sector in terms of overall data breaches with breach notices tripling year-on-year to 224.

   “The decrease in victims impacted is a bit of good news, though still too high.

   “We believe it is due to identity criminals launching more targeted attacks, which differ from tactics used five to 10 years ago. With that said, it is critical that businesses and consumers continue to practice good password hygiene and transition to Passkeys when possible,” Eva Velasquez, president and CEO of the ITRC said of the results.

Jason Keirstead, VP of Collective Threat Defense, Cyware had this to say:

   “In our interconnected digital environment, supply chain security and a program that enables collective defense have never been more critical. Organizations must not only consider their own cyber resilience but also the resilience and security programs across their entire supply chain. To enable a proactive cybersecurity defense, organizations need to adopt context-rich intelligence and operationalize it to ensure the right people get the right insights to make the right decisions to mitigate risk.”

This report highlights what I’ve been saying for a long time. This sort of thing is completely out of control. Only via a concerted effort to lock everything down, secure everything, educate everyone and be on constant guard for threats can this be controlled. Though part of me wonders if it’s already too late for that.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading