76% of data breaches utilized weak or stolen credentials like default usernames and passwords. Social engineering targeting ex-employees and managers accounted for 27% of breaches. 29% of all breaches involved some kind of social element like phishing or pretexting where attackers trick victims into providing access to systems or sensitive information.

1. Data Source: Verizon Data Breach Report 2013. Images ©Advent IM Ltd June 2013
pass
pass
pass
pass
pass
pass
pass
pass
pass
pass
76% of data
breaches utilised weak or
stolen credentials
Username: admin
Password: password
ATM card
skimming
including
use of 3D
printing
Theft
Surveillance or
spying
Sometimes
the breach has
been in
planning and
progress for
months and
may involve
various
security
intervention
opportunities

2. Data Source: Verizon Data Breach Report 2013.Some Images courtesy of
freedigitalphotos.net ©Advent IM Ltd June 2013
Social Engineering targets – many remain shadowy however
in larger organisations, ex employees are just as much of a
vulnerability as current managers…time to check those
Leavers Policies…
27% of Managers targeted and 27% of Ex Employees

3. Data Source: Verizon Data Breach Report 2013.Some Images courtesy of
freedigitalphotos.net ©Advent IM Ltd June 2013
29%
of breaches
involved some
kind of ‘Social
element’