2019 verizon data breach investigations report2019/10/16 · verizon confidential and proprietary....
TRANSCRIPT
![Page 1: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/1.jpg)
Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.
2019 Verizon Data Breach Investigations ReportSuzanne Widup
![Page 2: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/2.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2
73CONTRIBUTING ORGANIZATIONS
41,686SECURITY INCIDENTS
2,013CONFIRMED DATA BREACHES
86COUNTRIES REPRESENTED
Demographics
![Page 3: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/3.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 3
Vocabulary for Event Recording and Incident Sharing (VERIS) is an open framework designed to provide a common language for describing security incidents (or threats) in a structured and repeatable manner.
Actor – Who did it?
Action – How’d they do it?
Asset – What was affected?
Attribute – How was it affected??
http://www.veriscommunity.net
The VERIS Framework
![Page 4: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/4.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 4
VERIS in Action
https://github.com/vz-risk/VCDB/issues
![Page 5: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/5.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 5
DBIR Overview
![Page 6: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/6.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 6
Incidents vs BreachesWhat influencesthese numbers?
• Regulatory requirements
• Partner visibility• Breach trends
![Page 7: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/7.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 7
Threat Actors
![Page 8: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/8.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 8
Actor Motives
![Page 9: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/9.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 9
Actor Varieties
![Page 10: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/10.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 10
Discovery Timeline
![Page 11: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/11.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 11
The Detection Deficit
![Page 12: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/12.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 12
The Healthcare Detection Deficit (2011-2018)
![Page 13: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/13.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 13
Industries
![Page 14: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/14.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 14
The Nefarious Nine Patterns
![Page 15: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/15.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 15
Industry Comparison
![Page 16: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/16.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 16
Healthcare Errors
![Page 17: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/17.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 17
Healthcare Misuse Actor Varieties
![Page 18: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/18.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 18
Healthcare Misuse Motivations
![Page 19: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/19.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 19
Healthcare
![Page 20: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/20.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 20
I Click, Therefore I am
![Page 21: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/21.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 21
Types of Social Attacks
![Page 22: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/22.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 22
Progress
![Page 23: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/23.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 23
By Industry
![Page 24: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/24.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 24
Financially-motivated Social Engineering
![Page 25: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/25.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 25
Malware
![Page 26: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/26.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 26
Choose the Form of the Destructor
![Page 27: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/27.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 27
Vectors and Varieties
![Page 28: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/28.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 28
Denial of Service Attacks
![Page 29: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/29.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 29
Unbroken Chains
![Page 30: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/30.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 30
Steps to Success
![Page 31: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/31.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 31
Paths
![Page 32: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/32.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 32
Beginning, Middle and End
![Page 33: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/33.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 33
Simulation
![Page 34: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/34.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 34
More InformationDownload the DBIR http://www.verizonenterprise.com/verizon-
insights-lab/dbir/
Grab the DBIR Graphics https://github.com/vz-risk/dbir/tree/gh-pages/2019
Learn about VERIS www.veriscommunity.net and
http://github.com/vz-risk/verisExplore the VERIS
Community Databasehttp://www.vcdb.org and https://github.com/vz-risk/VCDB/issues
Ask a Question [email protected]
Follow Us @vzdbir and hashtag #dbir
![Page 35: 2019 Verizon Data Breach Investigations Report2019/10/16 · Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited. 2 73 CONTRIBUTING](https://reader034.vdocuments.mx/reader034/viewer/2022052105/60411f85925356260d6a0413/html5/thumbnails/35.jpg)
Verizon confidential and proprietary. Unauthorized disclosure, reproduction or other use prohibited.
Thank you.Twitter: @SuzanneWidup
@VERISDB for data breach feed