Attack mechanisms

Attack mechanism values

• Business email compromise
  2 incidents2 organizations
• Credential compromise
  21 incidents29 organizations
• Data extortion
  19 incidents25 organizations
• Distributed denial of service (DDoS)
  7 incidents9 organizations
• Insider threat
  6 incidents6 organizations
• Malware
  22 incidents23 organizations
• Phishing
  8 incidents12 organizations
• Ransomware
  136 incidents176 organizations
• Supply chain compromise
  3 incidents5 organizations
• Unauthorized access
  198 incidents281 organizations
• Unknown cyber mechanism
  176 incidents242 organizations
• Vulnerability exploitation
  11 incidents30 organizations
• Website defacement
  7 incidents12 organizations