/
← Voltar ao feed
medium technology finance insurance healthcare professional services retail education

Kroll: Tech Sector Compromises Drive 79% of Third-Party Breach Victims; 69% of Victims Hit via Third Parties

1 fonte(s) · 1 atualização(ões) · publicado 23/10/2026 07:00 · coletado há 11 horas

A Kroll report published on October 22 finds that 69% of data breach victims over June 2025 to June 2026 were affected through a third-party breach. In 79% of those cases, the data was accessed after the compromise of a technology company. Finance (9%), insurance (6%) and healthcare (5%) accounted for far smaller shares of third-party-sourced victims. Technology firms caused 60% of all breach victims, yet made up only 6% of observed incidents and were the seventh most commonly breached sector. This shows that one vendor compromise can cascade to many downstream organizations and individuals.

Detalhes técnicos

  • Share of all breach victims by originating sector: technology 60%, insurance 10%, finance 8%, healthcare 8%, education 7.5%.
  • Most breached sectors by incident count: finance (20%), professional services (20%), healthcare (15%), retail (8%).
  • Among security leaders surveyed, 69% reported a breach in the previous 12 months and 34% reported more than one.
  • Denyl Green, global head of breach notification at Kroll, said that in most major incidents handled, a vendor, software supplier or service provider linked the initial breach to the affected organizations.
  • The article notes that actors such as Scattered Spider target IT service providers to reach customers' systems. It also notes an October 2026 report that a Chinese nation-state actor accessed ConnectWise's cloud infrastructure, enabling targeting of downstream customers.

Linha do tempo

  1. infosecurity-magazine.com ↗ · pub. 23/10/2026 07:00 · coletado 23/10 07:01 primeiro registro

    Kroll: Tech Sector Compromises Drive 79% of Third-Party Breach Victims; 69% of Victims Hit via Third Parties

    ler a análise desta fonte

    A Kroll report published on October 22 finds that 69% of data breach victims over June 2025 to June 2026 were affected through a third-party breach. In 79% of those cases, the data was accessed after the compromise of a technology company. Finance (9%), insurance (6%) and healthcare (5%) accounted for far smaller shares of third-party-sourced victims. Technology firms caused 60% of all breach victims, yet made up only 6% of observed incidents and were the seventh most commonly breached sector. This shows that one vendor compromise can cascade to many downstream organizations and individuals.

    Technical Details

    • Share of all breach victims by originating sector: technology 60%, insurance 10%, finance 8%, healthcare 8%, education 7.5%.
    • Most breached sectors by incident count: finance (20%), professional services (20%), healthcare (15%), retail (8%).
    • Among security leaders surveyed, 69% reported a breach in the previous 12 months and 34% reported more than one.
    • Denyl Green, global head of breach notification at Kroll, said that in most major incidents handled, a vendor, software supplier or service provider linked the initial breach to the affected organizations.
    • The article notes that actors such as Scattered Spider target IT service providers to reach customers' systems. It also notes an October 2026 report that a Chinese nation-state actor accessed ConnectWise's cloud infrastructure, enabling targeting of downstream customers.