Widespread Third-Party Data Breaches Impacting Victims
A recent report by Kroll, a prominent financial and risk advisory firm, reveals alarming statistics regarding the prevalence of data breaches linked to third-party vulnerabilities. The findings highlight that more than two-thirds (69%) of individuals who reported being victims of data breaches in the past year were adversely affected by a breach that originated from a third-party source. This underscores a significant concern in the realm of cybersecurity, where associations with external vendors have become a crucial vulnerability for organizations across various sectors.
Among those victims, a staggering 79% found their data compromised due to the breach of a technology company between June 2025 and June 2026. This figure highlights the tech industry’s vulnerability, which has become a widespread target for cybercriminals. The report further delineates that incidents involving technology companies outnumber those from other sectors at a considerable rate. For instance, breaches attributed to finance, insurance, and healthcare stand at a mere 9%, 6%, and 5% respectively. This stark contrast signifies the growing risks associated with technological intermediaries in the digital ecosystem.
The Kroll report goes on to indicate that technology firms alone were responsible for 60% of all reported data breach victims within the 12-month timeframe. This includes breaches that originated from a single organization as well as those arising from vulnerabilities within a supply chain. Following the technology sector, the report cites insurance as accounting for 10% of breaches, finance and healthcare each at 8%, and education at 7.5%. The data reveals a critical need for organizations to scrutinize their supply chain partners and implement robust security measures, particularly when dealing with technology firms.
A survey conducted as part of the Kroll report aimed at security leaders across various industries yielded concerning results; 69% reported their organization had suffered a data breach within the preceding 12 months, with 34% indicating they experienced multiple incidents. This data amplifies the sense of urgency for organizations to reassess their cybersecurity strategies, especially given the intricacies of third-party vulnerabilities.
Finance and Professional Services: The Most Breached Sectors
Interestingly, while technology companies have been implicated as the sources of the majority of individual data breaches, the Kroll report identifies finance and professional services as the sectors most frequently targeted. Finance accounted for 20% of the breaches noted, closely followed by professional services at 20% as well. Healthcare secured the third spot with 15% of incidents, while retail reported 8%. Notably, technology only comprised 6% of actual breach incidents, revealing a paradoxical reality where the sector affects the largest number of victims despite being less frequently breached.
The researchers at Kroll emphasize this unique disparity, illustrating that while industries such as finance or healthcare may seem more susceptible due to a higher frequency of breaches, the ramifications that arise from a single compromise in a technology company can ripple outward, affecting a multitude of businesses and individuals. Denyl Green, global head of breach notification at Kroll, elaborates on this phenomenon, stating, "Across most of the major incidents we handled over the past year, a vendor, software supplier or service provider was the link between the initial breach and the organizations affected." This emphasizes the interconnected nature of modern businesses, where a breach can propel a wide-reaching impact, often catching affected organizations off guard.
Green referenced the actions of various cybercriminal groups, highlighting the tactics employed by actors such as the Scattered Spider hacking collective, which is known for specifically targeting IT service providers to facilitate access to their clients’ systems. In a notable incident reported in October 2026, a Chinese nation-state actor successfully infiltrated the cloud architecture of IT management software provider ConnectWise. This breach enabled the group to extend its reach towards downstream customers, significantly amplifying the threat landscape.
The Kroll report thus serves as a clarion call for organizations to fortify their cybersecurity measures, particularly regarding their relationships with third-party vendors. The complex web of interdependencies between businesses necessitates a proactive approach to security, emphasizing the importance of thorough vetting and ongoing monitoring of third-party partners. As the landscape of cyber threats continues to evolve, organizations must remain vigilant to safeguard their data, their customers, and their reputations in an increasingly interconnected world.