GITNUXREPORT 2025

Misusing Statistics

Most data breaches stem from employee misuse and insider threats, increasing risks.

Jannik Linder

Co-Founder of Gitnux, specialized in content and tech since 2016.

First published: April 29, 2025

Our Commitment to Accuracy

Rigorous fact-checking • Reputable sources • Regular updatesLearn more

Statistic 1

90% of cyber attacks start with a phishing email, often exploiting misused credentials

Statistic 2

81% of data breaches are due to compromised credentials, frequently a result of misuse or mishandling of login information

Statistic 3

54% of organizations report increased misuse of SaaS tools leading to security incidents

Statistic 4

45% of data breaches involve the misappropriation of intellectual property, often through misuse of access rights

Statistic 5

51% of security incidents originate from misconfigured or misused cloud services

Statistic 6

40% of security breaches originate from misused or unpatched vulnerabilities, including outdated software

Statistic 7

60% of data breaches are caused by the misuse of third-party vendors, indicating a need for better oversight and controls

Statistic 8

73% of malware infections involve some level of misuse, such as downloading attachments or visiting malicious sites

Statistic 9

47% of breaches involve the misuse of company email accounts for malicious purposes, like spear-phishing or data exfiltration

Statistic 10

42% of organizations have experienced a breach directly resulting from misuse of software or applications, such as unauthorized access or manipulation

Statistic 11

Approximately 70% of data breaches are caused by insider threats

Statistic 12

60% of organizations have experienced at least one data breach caused by employee misuse

Statistic 13

48% of cyberattacks are facilitated by human error, including misuse of systems

Statistic 14

44% of security breaches involve employee negligence or mistakes

Statistic 15

50% of employees admit to sharing passwords with colleagues, increasing misuse risks

Statistic 16

36% of data breaches involve insider misuse or abuse of access privileges

Statistic 17

75% of data theft is committed by current or former employees

Statistic 18

29% of organizations have experienced a security incident caused by malicious insiders

Statistic 19

63% of data loss incidents originate from improper data handling or misuse of data access

Statistic 20

82% of organizations lack sufficient tools to detect insider misuse, increasing vulnerability to data breaches

Statistic 21

The misuse of privileged accounts accounts for 80% of data breaches involving insiders

Statistic 22

65% of organizations do not conduct regular employee cybersecurity training, leading to increased misuse risk

Statistic 23

27% of breaches are linked to misuse of physical access controls, such as tailgating or improper key management

Statistic 24

66% of organizations report challenges in monitoring employee activity to prevent misuse

Statistic 25

82% of data theft incidents involve unauthorized data transfers, often facilitated by misuse of file sharing tools

Statistic 26

70% of cybercriminal scams involve some form of misuse or abuse of trust, such as social engineering

Statistic 27

52% of employees admit to deliberately bypassing security policies, posing significant misuse risks

Statistic 28

34% of organizations have experienced security incidents due to improper disposal of sensitive information, indicating misuse or negligence

Statistic 29

78% of security incidents could have been prevented through proper employee training on misuse and security best practices

Statistic 30

41% of data leaks are caused by the misuse of removable media, such as USB drives, without proper controls

Statistic 31

57% of cybersecurity professionals believe that insider misuse is one of the top threats facing organizations today

Statistic 32

48% of companies have had to respond to a data breach involving employee misuse, with the average breach costing $3.86 million

Statistic 33

67% of insider threats involve some form of misuse of privileged admin accounts, emphasizing the need for strict access controls

Statistic 34

63% of security teams report difficulty in detecting insider misuse due to lack of monitoring tools

Statistic 35

49% of all data breaches are linked to employee or contractor misuse of data or systems

Statistic 36

84% of employees admit to using unapproved applications or tools for work, increasing misuse vulnerabilities

Statistic 37

55% of organizations report challenges in enforcing proper misuse policies across all employee levels, leading to increased risk

Statistic 38

72% of security incidents involved some form of misuse or policy violation, highlighting human factors in security breaches

Statistic 39

The average cost of a data breach caused by misuse can be as high as $4 million

Statistic 40

38% of companies have suffered financial loss due to misuse of company data or systems

Statistic 41

69% of financial losses due to misuse are preventable through better authorization and access controls

Statistic 42

58% of security breaches involving misuse are detected only after significant damage has occurred, underscoring the importance of proactive detection

Statistic 43

55% of organizations report difficulties in detecting misuse behaviors within their networks, leading to delayed responses to incidents

Slide 1 of 43

Sources

Our Reports have been cited by:

Trust Badges - Publications that have cited our reports

Key Highlights

Approximately 70% of data breaches are caused by insider threats
60% of organizations have experienced at least one data breach caused by employee misuse
48% of cyberattacks are facilitated by human error, including misuse of systems
90% of cyber attacks start with a phishing email, often exploiting misused credentials
44% of security breaches involve employee negligence or mistakes
The average cost of a data breach caused by misuse can be as high as $4 million
81% of data breaches are due to compromised credentials, frequently a result of misuse or mishandling of login information
54% of organizations report increased misuse of SaaS tools leading to security incidents
50% of employees admit to sharing passwords with colleagues, increasing misuse risks
36% of data breaches involve insider misuse or abuse of access privileges
75% of data theft is committed by current or former employees
29% of organizations have experienced a security incident caused by malicious insiders
63% of data loss incidents originate from improper data handling or misuse of data access

Did you know that a staggering 70% of data breaches are caused by insider threats, often fueled by employee misuse and human error, highlighting a critical vulnerability that organizations worldwide are struggling to combat?

Cybersecurity Causes and Sources

90% of cyber attacks start with a phishing email, often exploiting misused credentials
81% of data breaches are due to compromised credentials, frequently a result of misuse or mishandling of login information
54% of organizations report increased misuse of SaaS tools leading to security incidents
45% of data breaches involve the misappropriation of intellectual property, often through misuse of access rights
51% of security incidents originate from misconfigured or misused cloud services
40% of security breaches originate from misused or unpatched vulnerabilities, including outdated software
60% of data breaches are caused by the misuse of third-party vendors, indicating a need for better oversight and controls
73% of malware infections involve some level of misuse, such as downloading attachments or visiting malicious sites
47% of breaches involve the misuse of company email accounts for malicious purposes, like spear-phishing or data exfiltration
42% of organizations have experienced a breach directly resulting from misuse of software or applications, such as unauthorized access or manipulation

Cybersecurity Causes and Sources Interpretation

While statistics reveal that most cyber breaches originate from misused credentials, misconfigured cloud settings, or vulnerable third-party vendors, the underlying message is clear: in cybersecurity, it's not just the attack but the misuse—of access, tools, or data—that truly opens the door to disaster.

Employee and Insider Risks

Approximately 70% of data breaches are caused by insider threats
60% of organizations have experienced at least one data breach caused by employee misuse
48% of cyberattacks are facilitated by human error, including misuse of systems
44% of security breaches involve employee negligence or mistakes
50% of employees admit to sharing passwords with colleagues, increasing misuse risks
36% of data breaches involve insider misuse or abuse of access privileges
75% of data theft is committed by current or former employees
29% of organizations have experienced a security incident caused by malicious insiders
63% of data loss incidents originate from improper data handling or misuse of data access
82% of organizations lack sufficient tools to detect insider misuse, increasing vulnerability to data breaches
The misuse of privileged accounts accounts for 80% of data breaches involving insiders
65% of organizations do not conduct regular employee cybersecurity training, leading to increased misuse risk
27% of breaches are linked to misuse of physical access controls, such as tailgating or improper key management
66% of organizations report challenges in monitoring employee activity to prevent misuse
82% of data theft incidents involve unauthorized data transfers, often facilitated by misuse of file sharing tools
70% of cybercriminal scams involve some form of misuse or abuse of trust, such as social engineering
52% of employees admit to deliberately bypassing security policies, posing significant misuse risks
34% of organizations have experienced security incidents due to improper disposal of sensitive information, indicating misuse or negligence
78% of security incidents could have been prevented through proper employee training on misuse and security best practices
41% of data leaks are caused by the misuse of removable media, such as USB drives, without proper controls
57% of cybersecurity professionals believe that insider misuse is one of the top threats facing organizations today
48% of companies have had to respond to a data breach involving employee misuse, with the average breach costing $3.86 million
67% of insider threats involve some form of misuse of privileged admin accounts, emphasizing the need for strict access controls
63% of security teams report difficulty in detecting insider misuse due to lack of monitoring tools
49% of all data breaches are linked to employee or contractor misuse of data or systems
84% of employees admit to using unapproved applications or tools for work, increasing misuse vulnerabilities
55% of organizations report challenges in enforcing proper misuse policies across all employee levels, leading to increased risk
72% of security incidents involved some form of misuse or policy violation, highlighting human factors in security breaches

Employee and Insider Risks Interpretation

With over two-thirds of data breaches stemming from insider misuse—like leaving sensitive data unprotected or sharing passwords—organizations are essentially inviting breaches through the back door they unknowingly leave ajar, proving that employee error and negligence are often the weakest links in cybersecurity armor.

Financial and Data Loss Impacts

The average cost of a data breach caused by misuse can be as high as $4 million
38% of companies have suffered financial loss due to misuse of company data or systems

Financial and Data Loss Impacts Interpretation

Misusing data isn't just a mistake—it's a costly gamble, with the average breach draining $4 million and over a third of companies feeling the financial fallout firsthand.

Preventive Measures and Challenges

69% of financial losses due to misuse are preventable through better authorization and access controls
58% of security breaches involving misuse are detected only after significant damage has occurred, underscoring the importance of proactive detection

Preventive Measures and Challenges Interpretation

These statistics starkly reveal that nearly 70% of financial losses from misuse are preventable with smarter access controls, while over half of security breaches are only caught after the damage is done, highlighting the urgent need for proactive detection rather than reactive responses.

Technology and Tool Gaps

55% of organizations report difficulties in detecting misuse behaviors within their networks, leading to delayed responses to incidents

Technology and Tool Gaps Interpretation

Nearly half of organizations struggle to spot misuse in their networks, turning cybersecurity into a game of whodunit where the villain often outsmarts the detective.