Third-party data breaches have become a major security concern
Share:
Almost all companies in Europe have seen a third party hacked. When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. Third-party data breaches have emerged as one of the biggest threats to cybersecurity for organizations in the European Union, new research has claimed.
A SecurityScorecard report took Europe’s top 100 companies and analyzed factors such as network security, malware infections, endpoint security, patching cadence, application security, and DNS health. It found virtually all European companies (98%) had experienced a third-party breach in the last year, meaning that practically every organization has had a partner company that was exposed. Although SecurityScorecard did not discuss it, it’s safe to assume that at least some of these organizations suffered some operational disruptions due to these breaches, especially since “just” 18% of companies reported direct breaches in the past year.
Looking at individual verticals, SecurityScorecard says that transport was the most secure sector with no companies with low scores. On the other end of the spectrum is the energy industry, with 75% of organizations scored C or lower (A being best, and F being worst). Furthermore, a quarter (25%) reported experiencing direct breaches.
Scandinavian, British, and German firms were reported as most secure, while France had the highest rate of third- and fourth-party vendor breaches (98% and 100% respectively). For Ryan Sherstobitoff, SVP of Threat Research and Intelligence at SecurityScorecard, prioritizing third-party risk management should be a priority for all EU firms, especially with DORA right around the corner.