Page 48 - GS180501

ISOMetrics

Global cyber threat Types of data compromised based on environment

landscape changing POS Percentage

Card track data
67%
Other 17%
Personally identifiable information (PII) 8%
Cash 6%
Card not present (CNP) 3%

Ecommerce
CNP 62%
Financial/user credentials 24%
Card track data 9%
PII 3%
Other 3%

Methods of exploit based on environment
rustwave Holdings Inc.'s 2018 Trustwave Global
Security Report identified emerging cybercrime POS Percentage
trends in 21 countries analyzed. Following
T are insights from the annual report, which Phishing/social engineering 47%
includes the types of businesses most impacted by recent Remote acces 23%
cybercriminal activity. Service providers saw a significant Malicious insider 13%
bounce in cyber attacks, as did the professional service Weak password 7%
and payment service segments. To read the full report,
visit www2.trustwave.com/globalsecurityreport.html. Other 7%
Misconfiguration 3%
Share of data compromises 2016 2017
by industry sector
Retail 22.2% 16.7% Ecommerce
Finance & insurance 13.6% 13.1% File upload 45%
Hospitality 12.3% 11.9% Code injection 39%
Food & beverage 19.8% 9.5% Remote access 13%
Service provider 0% 9.5% Week password 3%
Professional services 1.2% 6.0%
Payment services 2.5% 4.8% Corporate/internal network
Healthcare 0% 3.6%
Other 28.4% 25.0% Phishing/social engineering 55%
Malicious insider 13%
Remote access 9%
Misconfiguartion 8%
Other 7%
Code injection 5%
Weak password 3%

48