Sony Pixel Power calrec Sony

2023 Thales Data Threat Report Reveals Increase in Ransomware Attacks and Human Error as Main Cause of Cloud Data Breaches

18/04/2023

Facebook

Twitter

LinkedIn

48% of IT professionals reported an increase in ransomware attacks with 22% of organisations experienced a ransomware attack in past 12 months

51% of enterprises do not have a formal ransomware plan

Of those recently suffered a cloud data breach, 55% of respondents identified human error as the primary cause

ThalesThales today announced the release of 2023 Thales Data Threat Report, its annual report on the latest data security threats, trends and emerging topics based on a survey of nearly 3000 IT and security professionals in 18 countries. This year's report found an increase in ransomware attacks, and increased risks to sensitive data in the cloud.

Nearly half (47%) of IT professionals surveyed believe that security threats are increasing in volume or severity with 48% reporting an increase in ransomware attacks. More than a third (37%) have experienced a data breach in the past 12 months, including 22% reporting that their organisation had been a victim of a ransomware attack.

Respondents identified their cloud assets as the biggest targets for cyber-attacks. Over a quarter (28%) said SaaS apps and cloud-based storage were the biggest targets, followed by cloud-hosted applications (26%) and cloud infrastructure management (25%). The increase in cloud exploitation and attacks is directly due to the increase in workloads moving to the cloud as 75% of respondents said 40% of data stored in the cloud is now classified as sensitive compared to 49% of respondents in 2022.

These are just a few of the key insights from the 2023 Thales Data Threat Report, conducted by 451 Research, which surveyed both private and public sector organisations. It reveals how businesses are responding and planning their data security strategies and practices in light of a changing threat landscape and the progress they are making to address threats.

Human error and the impact of ransomware Simple human error, misconfiguration or other mistakes can accidentally lead to breaches - and respondents identified this as the leading cause of cloud data breaches. For those organisations that have suffered a data breach in the past 12 months, misconfiguration or human error was the primary cause identified by 55% of respondents. This was followed by the exploitation of a known vulnerability (21%), and of a zero day / previously unknown vulnerability (13%). The report finds that identity and access management (IAM) is the best defence, with 28% of respondents identifying it as the most effective tool to mitigate these risks.

Meanwhile, the severity of ransomware attacks appears to be declining, with 35% of 2023 respondents reporting that ransomware had a significant impact compared to 44% of respondents reporting similar levels of impact in 2022. Spend is moving in the right direction too, with 61% reporting they would shift or add a budget for ransomware tools to prevent future attacks - up from 57% in 2022 - yet organisational responses to ransomware remain inconsistent. Only 49% of enterprises reported having a formal response ransomware plan, while 67% still report data loss from ransomware attacks.

Addressing the challenges of digital sovereignty Digital sovereignty is becoming more top of mind for data privacy and security teams. Overall, the report found that data sovereignty remains both a short- and long-term challenge for enterprises. 83% expressed concerns over data sovereignty, and 55% agreed that data privacy and compliance in the cloud has become more difficult, likely due to emergence of requirements around digital sovereignty.

Emerging threats from quantum computers that could attack classical encryption schemes are also a cause for concern for organisations. The report found that Harvest Now, Decrypt Later ( HNDL ) and future network decryption were the greatest security concerns from quantum computing - with 62% and 55% reporting concerns respectively. While Post Quantum Cryptography (PQC) has emerged as a discipline to counter these threats, the report found that 62% of organisations have five or more key management systems, presenting a challenge for PQC and crypto agility.

Sebastien Cano, Senior Vice President for Cloud Protection and Licensing activities at Thales, comments: Enterprises continue to see a serious threat landscape. Our findings indicate good progress is being made in certain areas, including MFA adoption and increased use of data encryption. However, there is still a lot of security gaps regarding data visibility. In an increasingly cloud-first world, organisations must maintain better control over their data so they can serve their stakeholders with greater safety and trust. As data sovereignty and protection regulations around the world tighten, security teams will need far more confidence in protecting where their data is being stored and how it is moving and being used.

About the 2023 Thales Global Data Threat Report The 2023 Thales Global Data Threat Report was based on a global 451 Research survey commissioned by Thales of almost 3000 executives with responsibility for or influence over IT and data security. Respondents were from 18 countries: Australia, Brazil, Canada, France, Germany, Hong Kong, India, Italy, Japan, Mexico, Netherlands, New Zealand, Singapore, South Korea, Sweden, the United Arab Emirates, the United Kingdom, and the United States. Organisations represented a range of industries, with a primary emphasis on healthcare, financial services, retail, technology, and federal government. Job titles ranged from C-level executives including CEO, CFO, Chief Data Officer, CISO, Chief Data Scientist, and Chief Risk Officer, to SVP/VP, IT Administrator, Security Analyst, Security Engineer, and Systems Administrator. Respondents represented a broad range of organizational sizes, with the majority ranging from 500 to 10,000 emp
LINK: https://www.thalesgroup.com/en/worldwide/security/press_release/2023-t...
See more stories from thales

More from Thales

25/09/2023

Thales in the UK Showcases Commitment to Supporting Women in STEM at Karren Brady's Women in Business and Tech Expo

Facebook Twitter LinkedIn L to R: Ifeoma Noelin Okolie, Lilly Rickenback &...

20/09/2023

Thales and Intel Collaborate to Enhance Trust in Confidential Computing

Facebook Twitter LinkedIn Collaboration leverages Thales CipherTrust Data Security Platform and Intel Trust Authority to deliver end-to-end data security...

20/09/2023

Thales Alenia Space celebrates 40th anniversary of its Toulouse plant

Facebook Twitter LinkedIn Leading innovation at the heart of the world's space ecosystem Toulouse, September 20, 2023 - Thales Alenia Space, the join...

19/09/2023

Thales joins the climate index on the Paris Stock Exchange

Facebook Twitter LinkedIn The CAC SBT 1,5 was launched in January 2023 by Euronext with the support of Amundi, the Carbon Disclosure Project (CDP) and th...

19/09/2023

Thales Announces Support for External Key Management in Oracle Cloud Infrastructure

Facebook Twitter LinkedIn Thales launches CipherTrust Cloud Key Management...

15/09/2023

Championing International Identity Day's Core Pillars

Facebook Twitter LinkedIn Every year, as the calendar turns to 16th of September, we commemorate International Identity Day. This significant day, ofte...

12/09/2023

Thales showcased advanced defence equipment at MSPO in Kielce, Poland

Facebook Twitter LinkedIn Thales, one of the global leaders in the defence industry, participated in the 31th edition of the International Defence Industr...

07/09/2023

Thales selected by Canada to Provide In-Service Support for Royal Canadian Navy Minor Warships and Auxiliary Vessels

Facebook Twitter LinkedIn The Royal Canadian Navy's (RCN) fleet of Min...

07/09/2023

Thales modernized Hong Kong's Tramway network with Electronic Payment System

Facebook Twitter LinkedIn Thales, in partnership with GOLONG (Golong International Technology Company Limited), provided an integrated electronic payment ...

05/09/2023

Thales and Kyndryl announce partnership for comprehensive response to cybersecurity incidents

Facebook Twitter LinkedIn This strategic partnership will combine cybers...

03/09/2023

Thales and Orascom Construction upgrade the Cairo - Giza - Beni Suef railway line in Egypt

Facebook Twitter LinkedIn Improved passenger safety and reliability Budge...

31/08/2023

Thales and Naval Group to provide through-life support for France's multi-mission frigates

Facebook Twitter LinkedIn Awarded to Thales by Naval Group, the seven-year...

30/08/2023

Thales Recognised as an Overall, Innovation and Market Leader in KuppingerCole Analysts Leadership Compass for Access Management

Facebook Twitter LinkedIn Thales OneWelcome Identity Platform recognised f...

30/08/2023

Thales Wins Google Cloud Technology Partner of the Year Security - Data Protection Award

Facebook Twitter LinkedIn Thales recognised as Google Cloud Technology Par...

25/08/2023

Thales SEC Transport Successfully Completed Wuhan Metro Line 1 Overhaul Project

Facebook Twitter LinkedIn In the early morning of August 20, the first batch of passengers began to board the Wuhan Metro Line 1, marking that the Wuhan M...

21/08/2023

Forensic investigation goes mobile with Thales

Facebook Twitter LinkedIn Thales presents its Evidence and Investigation Suite, a new generation of biometric identification solution dedicated to police ...

31/07/2023

CONTRACT FOR THE MID-LIFE UPGRADE (MLU) OF THE HORIZON CLASS FRIGATES

Facebook Twitter LinkedIn OCCAR (Organisation for Joint Armament Cooperation) has awarded Naviris and eurosam a contract for the Mid-Life Upgrade (MLU) of...

31/07/2023

CONTRACT FOR THE MID-LIFE UGRADE (MLU) OF THE HORIZON CLASS FRIGATES

Facebook Twitter LinkedIn OCCAR (Organisation for Joint Armament Cooperation) has awarded Naviris and eurosam a contract for the Mid-Life Upgrade (MLU) of...

26/07/2023

Thales launches a secure marketplace to accelerate Restricted Distribution projects for strategic industries

Facebook Twitter LinkedIn Thales has launched TrustNest R-Suite to enable ...

25/07/2023

Thales to create a world-class global cybersecurity leader, acquiring US-based cyber champion Imperva from Thoma Bravo

Facebook Twitter LinkedIn Thales (Euronext Paris: HO) announces today that...

24/07/2023

ESA chooses Thales Alenia Space for SOLARIS feasibility study

Facebook Twitter LinkedIn A European project to use clean solar power from space to meet energy requirements down on Earth Turin, July 24, 2023 - Thales ...

21/07/2023

Thales reports its 2023 half-year results

Facebook Twitter LinkedIn Thales's Board of Directors (Euronext Paris: HO) met on July 20, 2023 to review the financial statements for the first half ...

20/07/2023

Thales confirms its key role to provide cybersecurity for Galileo Second Generation to meet tomorrow's threats

Facebook Twitter LinkedIn Thales has been notified by the European Space A...

19/07/2023

NCC Bank of Bangladesh ensures secure and seamless real-time Binimoy transactions with Thales Luna HSMs

Facebook Twitter LinkedIn Thales Luna HSMs meet the security requirements ...

19/07/2023

Thales Deepens its Research & Technology Commitment in Singapore with Extension of Joint NTU / CNRS Laboratory

Facebook Twitter LinkedIn The CNRS International - NTU - Thales Research A...

13/07/2023

Nexter, Thales and Arquus deliver the 500th Griffon on SCORPION programme to the French armament general directorate (DGA)

Facebook Twitter LinkedIn Nexter, Arquus and Thales have presented the 500...

13/07/2023

Nexter, Thales and Arquus deliver the 500th Griffon on SCORPION programme to the French defence procurement agency

Facebook Twitter LinkedIn Nexter, Arquus and Thales have presented the 500...

12/07/2023

Tlcom Paris, Bouygues Telecom and Thales team up for new research chair in Responsibility for Digital Identity

Facebook Twitter LinkedIn Supported by the Fondation Mines-T l com as part...

12/07/2023

Thales to acquire Cobham Aerospace Communications to strengthen its avionics portfolio

Facebook Twitter LinkedIn Thales enters into exclusive negotiation to acqu...

11/07/2023

Thales to provide new-generation sonar suite for France's nuclear-powered ballistic-missile submarines (SSBNs)

Facebook Twitter LinkedIn Thales has been awarded a contract by the French...

06/07/2023

SYRACUSE 4B military communication satellite successfully launched

Facebook Twitter LinkedIn SYRACUSE 4B will join SYRACUSE 4A in orbit to boost communications capabilities for French armed forces Kourou, July 6, 2023 -...

05/07/2023

Cloud assets the biggest targets for cyberattacks, as data breaches increase

Facebook Twitter LinkedIn 39% of businesses experienced a data breach in their cloud environment last year, an increase of 4points from the previous year ...

05/07/2023

2023 Thales Cloud Security Report Reveals Cloud Assets As One Of The Biggest Targets For Cyberattacks in India

Facebook Twitter LinkedIn 35% of Indian respondents experienced a data bre...

05/07/2023

Thales reinforces air surveillance capabilities for Sweden with SMART-L Multi Mission long-range radars

Facebook Twitter LinkedIn The Swedish Defence Materiel Administration (FMV...

04/07/2023

Thales Alenia Space creates Space Business Catalyst, the first industry accelerator dedicated to space

Facebook Twitter LinkedIn This initiative facilitates the emergence of new...

04/07/2023

Thales appoints Alexandra Boucheron as Vice President, Head of Investor Relations

Facebook Twitter LinkedIn Reporting to Pascal Bouchiat, Senior Executive V...

01/07/2023

Euclid European scientific satellite successfully launched

Facebook Twitter LinkedIn Thales Alenia Space, alongside ESA, at the core of such an extraordinary mission that will open new pages of modern cosmology T...

29/06/2023

Thales to equip the new Dutch and Belgian Frigates with leading edge Above Water Warfare System

Facebook Twitter LinkedIn The Dutch Command Materiel and IT (COMMIT) and T...

28/06/2023

Thales Partners with Google Cloud to Build New, Generative AI-Powered Security Capabilities

Facebook Twitter LinkedIn New AI-powered features built into the CipherTru...

22/06/2023

Thales Alenia Space signs contract with ArianeGroup to start production of the Ariane 6 range safeguard system

Facebook Twitter LinkedIn June 22, 2023 - Thales Alenia Space, the joint c...

22/06/2023

Thales reinforces support to Estonia for airspace sovereignty

Facebook Twitter LinkedIn As part of the Medium Range Radar 2023 project (MRR 2023), the Estonian Center for Defence Investment (ECDI) contracts Thales to...

22/06/2023

Thales in Glasgow Partners with Primary Engineer to Bring Young Student's Plant Prototype to Life

Facebook Twitter LinkedIn Thales, a global leader in technology and servic...

22/06/2023

Thales takes the lead in the European EPIIC research project to design the technologies for the future military cockpit

Facebook Twitter LinkedIn Financed by the European Commission through the ...

21/06/2023

The Group's extra-financial performance in 2022: the latest Integrated Report on Corporate Responsibility

Facebook Twitter LinkedIn The latest Thales Integrated Report on Corporate...