For a refresher of key hacking terms and definitions, read our helpful cybersecurity glossary from Part 1: Hacking Basics<\/a>. You may also want to check out Part 2: What\u2019s Being Hacked (And What Changed With Covid)<\/a> to truly grasp what data hackers are after, regardless of their location.<\/p>\n\n\n\n
<\/p>\n\n\n\n
Jump to a section below, or read on:<\/em><\/p>\n\n\n\n <\/p>\n\n\n\n Who is the biggest target of hackers? Is it the individuals or industries? Let\u2019s take a closer look at data breach statistics, who tends to suffer cyber attacks the most, as well as the perpetrators who conduct them<\/p>\n\n\n\n <\/p>\n\n\n\n Inconsistencies in the identification, recording, and reporting of data breaches make it almost impossible to know the total number of hacks (and exposed users) worldwide every year. <\/p>\n\n\n\n A variety of factors contribute to significant the lack of data, such as companies having inadequate cybersecurity practices or analyzing only parts of the information in their databases.<\/p>\n\n\n\n <\/p>\n\n\n\n Fraud data from the Federal Trade Commission (FTC) suggests that older internet users are more likely to become cybercrime victims<\/strong>. Its findings show that 60 to 69-year-olds lodged almost 180 000 fraud complaints in 2020, which is the most out of all age demographics. Younger age groups use technology more often than older generations \u2014 yet fraud complaints aren\u2019t that common among them.\u00a0<\/p>\n\n\n\n <\/p>\n\n\n\n No matter how advanced your company\u2019s cybersecurity is, you can\u2019t escape the human element. Data breach statistics show that human error is a leading barrier to establishing effective cybersecurity programs.<\/strong> A low level of cybersecurity awareness opens the door for targeted social engineering attacks and subpar cybersecurity hygiene. Educating employees is the best way to minimize this risk.<\/p>\n\n\n\n Sadly, there is a scarcity of appropriately qualified cybersecurity professionals<\/strong>. The talent pool has dried up as companies moved to invest in their security departments throughout the last 18 months, and this is now a major hindrance to businesses.<\/p>\n\n\n\n <\/p>\n\n\n\n Proofpoint crunched the numbers on their phishing simulation program to reveal the average \u201cfailure rate\u201d by industry. The results show us how often organizations fall for phishing attempts.<\/p>\n\n\n\n Generally, industries that are more susceptible to phishing attempts undergo a higher level of testing and have more general experience with phishing messages. Educating staff is critical too as it prepares employees for possible social engineering attacks. That\u2019s why, despite being targeted the most, healthcare and government organizations actually have quite a low failure rate<\/strong> \u2014 their staff and systems are prepared to handle phishing attacks.<\/p>\n\n\n\n On the other hand, the data suggests that industries that are not targeted as often are more vulnerable to phishing attempts. Engineering, telecom, and mining stand out as three sectors with high failure rates.<\/strong> The increased vulnerability of these sectors is due to lack of importance placed on cybersecurity and insufficient training for the staff.<\/p>\n\n\n\n <\/p>\n\n\n\n According to CyberEdge, educational organizations undergo successful cyber attacks more than other industries<\/strong>: 92.3% of education businesses experienced an attack in 2020. Throughout the surveyed period, 90.3% of manufacturing companies and 87.4% of telecom & technology companies were targeted by cybercriminals.<\/p>\n\n\n\n The finance and healthcare sectors are consistently earmarked as targeted industries<\/strong>, primarily due to their extensive stores of customer data. These were the two worst affected industries when it came to multiple breach incidents for each company. According to Verizon, 15% of all breaches in 2020 involved healthcare organizations, 10% of all breaches affected financial companies, and 16% occurred in the public sector.<\/p>\n\n\n\n <\/p>\n\n\n\n As the demand for cybersecurity professionals grows amidst rising cybercrime, there is a lack of available talent to fill the void. Only 30% of professionals report their companies have the right amount of cybersecurity staff<\/strong> \u2014 but 64% report a significant or slight shortage in IT experts. The cybersecurity talent crisis is nothing new and has been a prevalent issue for several years.<\/p>\n\n\n\n This doesn\u2019t mean the workforce shortage isn\u2019t directly impacting organizations. Over half of cybersecurity professionals claim their staff shortage is causing moderate to extreme security risks<\/strong>. A high price to pay for a problem outside of most employers\u2019 control.<\/p>\n\n\n\n <\/p>\n\n\n\n These are the largest hacking breaches of all time. For the record, these standings only include breaches caused by hacking incidents \u2014 misconfiguration, lost devices, or other poor data security practices are not weighed in.<\/p>\n\n\n\n Yahoo is the largest hacking incident and one of the largest breaches to date.<\/strong> Hackers used malicious cookies to imitate user authentication and gain access to accounts. They stole 3 billion records with user PII, including names, dates of birth, email addresses, phone numbers, hashed passwords, and even security answers.\u00a0<\/p>\n\n\n\n An affiliate employee downloaded malware onto Alibaba\u2019s system to scrape over 1 billion records<\/strong> in 2019. It\u2019s important to note that this wasn\u2019t a human error \u2014 Alibaba reported the employee purposefully violated the cybersecurity practices and helped leak vulnerable shopper details. That same year, hackers exploited a vulnerability in one of SinaWeibo\u2019s websites to expose over 500 million user files.<\/p>\n\n\n\n More than 500 million Facebook records were scraped due to a website vulnerability<\/strong> too. The social media platform is regularly criticized for letting user data slip through, so it may not be the last Facebook data breach we see. Adult Friend Finder also fell victim to a huge hacker attack. Bad actors were able to unencrypt account credentials for almost every account after a network hack.<\/p>\n\n\n\n <\/p>\n\n\n\n There are three reasons behind a data leak: human error, a system glitch, or a malicious attack.\u00a0<\/p>\n\n\n\n Bad actors are behind 52% of data breaches.<\/strong> The Middle East suffers worst from malicious attacks with bad actors at fault for 59% of breaches. In Germany, 57% of breaches are malicious. And even though Canada is the least affected by malicious actor breaches, they still account for 42% of all leaks.<\/p>\n\n\n\n Verizon also reports that hacking was the top cause in 45% of malicious breaches<\/strong>. Social attacks occur in 22% of breaches, and 17% of attacks include malware.<\/p>\n\n\n\n Human error and system glitches are almost equally responsible for the remaining breaches<\/strong>: 23% and 25% respectively. Considering that these could be lowered by providing appropriate education and hiring skilled cybersecurity professionals, they\u2019re still quite high on the list.<\/p>\n\n\n\n <\/p>\n\n\n\n The majority of malicious attackers are financially motivated. 53% of hackers compromise data for monetary gains, 13% are nation-state hackers, and another 13% are \u201chacktivists.\u201d<\/p>\n\n\n\n Hacktivists are hackers that gain access to data or disrupt organizations for social or political motivations.<\/strong> A hacktivist could prevent a target company from continuing its business operations, or they could steal files related to their cause.<\/p>\n\n\n\n <\/p>\n\n\n\n Illegal online markets such as the ones on the dark web are the biggest source of income for hackers.<\/strong> Hackers often sell stolen data online to turn a quick profit, leaving fraud, scams, and other forms of targeted cybercrime to the buyer. Doing so brings in $860 billion in earnings for hackers every year.<\/p>\n\n\n\n Trade secrets and IP theft also net a healthy profit.<\/strong> Although these are not found as easily as customer PII, when obtained, trade secrets and intellectual properties can be sold at a high price to rival businesses. Due to their high market value, trade files earn hackers $500 billion per year!\u00a0<\/p>\n\n\n\n <\/p>\n\n\n\n Nation-state attacks are rising exponentially following a prolific period of activity.<\/p>\n\n\n\n 2020 was a marquee year for nation-state hackers. State-led hacking groups capitalized on a general rise in cybercrime to exact chaotic attacks across a variety of rival government institutions and industries.<\/p>\n\n\n\n In a HP survey, 64% of security experts think this upward trend demonstrates a \u201cworrying\u201d or \u201cvery worrying\u201d escalation in global tensions. Wars are no longer fought on battlefields, it seems, but rather in the shadows of the online world.<\/p>\n\n\n\n <\/p>\n\n\n\n Despite government ties, nation-state hackers are part of the cybercrime economy<\/strong>. In Dr. Michael McGuire\u2019s study for HP, 65% of security experts say they think nation-states are profiting from cybercrime. They\u2019re not entirely wrong.<\/p>\n\n\n\n Nation-state hackers trade tools, data, and services online<\/strong> to fulfill the interests of their government. They may even hire other hackers to conduct attacks on their behalf, a practice designed to keep the spotlight away from official authorities.<\/p>\n\n\n\n <\/p>\n\n\n\n Perhaps surprisingly, nation-state hackers target enterprises more than anyone else<\/strong>. Since 2009, 35% of nation-state attacks have disrupted businesses all over the world. Cyberdefense is an expected target, accounting for 25% of nation-state attacks, while media and communications (14%), government institutions(12%), and critical infrastructures (10%) seem to be less focused on.<\/p>\n\n\n\n Research also shows that individuals don\u2019t have to worry much about nation-state hackers<\/strong>. It\u2019s highly unlikely you\u2019ll become a target as attackers have much less to gain if they focus on private users.<\/p>\n\n\n\n <\/p>\n\n\n\n Big hacking groups have made a huge impact on the cyber infrastructure over the last few years. Between 2016 and 2018, the largest hacking groups attacked around 55 institutions.<\/p>\n\n\n\n Nation-state hackers like the USA\u2019s Equation Group or Russia\u2019s Fancy Bear have been locked in a \u201ccyber-war\u201d<\/strong>, with both entities launching huge political attacks. Although Iranian hackers officially attacked Iran\u2019s nuclear program, Equation Group is thought to have helped develop the Stuxnet program that brought it down.<\/p>\n\n\n\n Lizard Squad was notorious for hacking systems for \u201cfun,\u201d while Anonymous has pulled off numerous acts of hactivist protests. <\/strong>The most notable incidents include Anonymous\u2019 hack on Minneapolis P.D. following the murder of George Floyd and the group\u2019s active takedown of Russian government sites.<\/p>\n\n\n\n Most hacking groups, like REvil, are financially motivated.<\/strong> REvil received an $11 million ransom payment from its attack on JBS. The group also conducted an effective breach on security company Kaseya, accessing systems for over 1,000 businesses.<\/p>\n\n\n\n However, REvil also demonstrates how hacking groups can go missing under pressure from authorities. LizardSquad was disbanded in 2015 and all REvil sites seem to have disappeared since the US urged Russia to take action. Not all hacking groups are easy to take down, but it\u2019s definitely possible with enough perseverance from governments.<\/p>\n\n\n\n <\/p>\n\n\n\n Three huge cybersecurity incidents have shaken the world over the last decade \u2014 all caused by whistleblowers, i.e. people who reveal secret info they deem illegal, immoral, or fraudulent.<\/p>\n\n\n\n Edward Snowden is possibly the most known whistleblower of all times. He stole and leaked groundbreaking revelations on the state of online privacy in the US back in 2013. Though not strictly a \u201chacking\u201d incident, Snowden exposed American data collection practices<\/strong> that forever changed the way we think about cybersecurity and online surveillance.\u00a0<\/p>\n\n\n\n Julian Assange\u2019s Wikileaks releases classified information from unspecified sources.<\/strong> Much of the data has been hacked or stolen from databases, including infamous footage of US apache pilots gunning down civilians and references to US Army intelligence.<\/p>\n\n\n\n John Doe is the person behind the Panama Papers<\/strong> \u2014 a leak that exposed the greedy practices of the rich and politically privileged alike. The files included ways people managed to launder money and avoid tax.<\/p>\n\n\n\n It\u2019s time we took a look at data breach statistics by country to get a picture of what the current cybersecurity scene looks like across the world. Specifically, we\u2019ll focus on where hackers are coming from, where they focus the attacks, and why certain countries experience data breaches more than others.<\/p>\n\n\n\n <\/p>\n\n\n\n The Global Threat Index outlines the nations most open to cyber attacks based on their network traffic, attack traffic, and vulnerabilities. This data is concurrent with research from the International Telecommunications Union (ITU).\u00a0<\/p>\n\n\n\n The ITU found that Mexico, Mongolia, Afghanistan, Pakistan, Burma, and Ethiopia are the most vulnerable to hacking attempts<\/strong>. Mexican companies have one of the worst levels of cybersecurity out there and the country ranked 52nd in the ITU\u2019s Global Cybersecurity Index (GCI).\u00a0<\/p>\n\n\n\n On the other hand, ITU ranks the United States as the nation with the best cybersecurity overall<\/strong>. The US scored a perfect 100 GCI score. This means that US companies heavily invest in cybersecurity to combat a large proportion of hacks.<\/p>\n\n\n\n Other secure nations include the United Kingdom and Saudi Arabia, both of which tied second with the GCI score of 99.54. The top 10 also includes Estonia (4th), South Korea (5th), Singapore (6th), Spain (7th), Russia (8th), UAE (9th), and Malaysia (10th).<\/p>\n\n\n\n <\/p>\n\n\n\n Colombian companies experience successful cyber attacks at a frighteningly high rate.<\/strong> Poor levels of cybersecurity in the country mean the vast majority of local businesses are an easy target for hackers. Mexican companies are targeted with high success (90.6%) for the same reason.<\/p>\n\n\n\n Almost all (91.5%) of Chinese and German companies are successfully cyber attacked.<\/strong> This may seem surprising as both countries rank quite high when it comes to cybersecurity practices. However, they become frequent targets due to the high volume of data local companies handle on a daily basis.<\/p>\n\n\n\n The US ranks 6th on the list, just under Spain<\/strong>, with 89.7%. American companies have a strong level of cybersecurity, but the sheer volume of attacks businesses face ranks the nation high in terms of data breach success.<\/p>\n\n\n\n <\/p>\n\n\n\n A significant cyber attack describes any attack that exposes records causing $1 million of economic damage or more. According to Visual Capitalist\u2019s data breach statistics, the United States is one of the top countries with the biggest data breaches<\/strong>. The country is the most targeted nation by hackers regardless of motive. This is hardly surprising considering the huge economic, political, and cultural impact America has around the world.<\/p>\n\n\n\n US organizations have suffered 156 significant cyber attacks over the last 15 years<\/strong>, which is more than UK and Indian institutions combined. In 2018 alone, American companies experienced a total of 30 hacking incidents \u2014 making it the most damaging year so far.<\/p>\n\n\n\n Germany is another nation that\u2019s frequently targeted. The most recent incident involved the German organization Funke Media Group, which was hit with a ransomware attack in December 2020. As a result, the company was left with 6,000 infected computers.<\/p>\n\n\n\n <\/p>\n\n\n\n IBM broke down the regions with the most malicious cyber activity in 2020. North America, Europe, and Asia suffered between 25-35% of attacks.<\/strong> However, North America was targeted far less than usual, falling from nearly 45% of breaches in 2019.<\/p>\n\n\n\n Europe turned out to be the most attacked region, accounting for over 30% of cyber incidents in 2020. That figure has grown since 2019, when Europe accounted for around 20% of attacks.<\/p>\n\n\n\n Latin America, Middle East, and Africa were the regions with the least data breaches.<\/strong> Still, the number of incidents in these areas grew since 2019, showing a clear indication that cyber attacks are an increasing problem almost all over the world.<\/p>\n\n\n\n <\/p>\n\n\n\n According to Cloudscene, the US has the largest volume of data centers in the world<\/strong>. In fact, the country has over five times more data centers than the next country on the list, the United Kingdom.<\/p>\n\n\n\n America is an economic powerhouse, home to data-fueled industries and some of the biggest tech brands across the globe. It\u2019s no surprise then, that the United States requires a sea of data centers to process applications, transfer data, and store information<\/strong>. This is also why it\u2019s the no.1 country with the most data breaches.\u00a0<\/p>\n\n\n\n America dominates the \u201chyperscale data center\u201d category too<\/strong> \u2014 these are massive facilities used by the likes of Google, Facebook, and Amazon. 39% of hyperscale data centers were located in the US in Q4 2020. The next closest country is China, which has a 10% share of all hyperscale data centers.<\/p>\n\n\n\n <\/p>\n\n\n\n Checkpoint\u2019s data gives us a glimpse into the leading malware categories for each region.<\/p>\n\n\n\n Generally, Asia-Pacific is the region with the most data breaches and malware attacks<\/strong>. Surprisingly, the Americas seem to have the lowest numbers across all categories when it comes to malicious hacks. However, this could be because Latin America isn\u2019t as much of a target as North America, evening out the median for these statistics.<\/p>\n\n\n\n <\/p>\n\n\n\n Data breaches vary in cost across different regions.<\/strong> Globally, they amount to an average of\u00a0 $4.24 million, but it\u2019s much lower than most countries endure on a yearly basis. The US suffers the biggest cyber attacks and therefore tops the list with over $9 million in related costs. Even though the Middle East faces lower costs, it still needs to fork out more than $6 million. Canada, Germany, Japan, France, and the UK all pay above the global average too.<\/p>\n\n\n\n Data protection legislation has a part to play. <\/strong>GDPR and the Federal Trade Commission are known to dish out some of the strictest punishments, and it\u2019s no surprise to see the United States and a host of European countries with the highest stats in this category.<\/p>\n\n\n\n However, there are more factors to consider. Data breach cost is heavily influenced by the severity of the data breach<\/strong>: the number of records leaked, the number of people affected, and the length of downtime.<\/p>\n\n\n\n <\/p>\n\n\n\n Europe leads the world with its data protection laws, known as GDPR.<\/strong> GDPR is one of the toughest privacy and security laws in the whole world, protecting user data of all kinds. The legislation covers all European Union countries, including the UK, France, Germany, Belgium, Italy, Poland, and Spain. However, any country with users within the EU still has to abide by GDPR if they want to serve that population, regardless of where it operates from.\u00a0<\/p>\n\n\n\n Africa has the second-highest number of countries with data protection laws.<\/strong> Leaders are recognizing the importance of data protection and recent amendments to local laws allowed Africa to align its practices with global standards. The Americas, Asia Pacific, the Arab States, and the Commonwealth of Independent States follow the regions closely on the list.<\/p>\n\n\n\n The rise in cybercrime felt during the COVID-19 pandemic stimulated a greater adoption of data privacy regulations around the world. 133 nations registered data protection laws in 2020 and a further 15 are drafting new legislation as we speak. Sadly, 46 nations still don\u2019t have data protection legislation in place<\/strong>.<\/p>\n\n\n\n <\/p>\n\n\n\n Akamai has the most recent study into the origins of cyber attack traffic. The results of the study are to be expected: China dominates the hacking landscape with 41% of all hacking activity.<\/p>\n\n\n\n The United States and Russia also feature high on the list. However, there are a couple of unexpected additions. Turkey features third in Akamai\u2019s study with 4.7% of the world\u2019s hacking activity. Meanwhile, Taiwan and Romania are two smaller nations that many may not have anticipated making it into the top ten.<\/p>\n\n\n\n <\/p>\n\n\n\n Some nations are suffering from the cybersecurity staffing shortage more than others. The likes of Canada, Australia, and the UK have smaller cybersecurity workforce gaps than other nations. Still, the deficits in these countries still represent a significant total. Overall, Mexico, Japan, Germany, and Brazil are in desperate need of talent<\/strong> to bolster their cybersecurity teams.<\/p>\n\n\n\n Possibly the most surprising of all, the United States is faced with the biggest cybersecurity workforce gap<\/strong>. Almost 880,000 cybersecurity professionals are still not enough to fight the high levels of cybercrime throughout the country, with more than 350,000 additional cybersecurity employees required to bridge the personnel gap.<\/p>\n\n\n\n <\/p>\n\n\n\n So, which regions<\/em> are desperate for cybersecurity professionals?<\/p>\n\n\n\n Despite problems in the US, North America is in a better shape than Latin America and Asia-Pacific. Two-thirds of the global demand for cybersecurity staff comes from organizations in the APAC region<\/strong> \u2014 a staff shortage of over 2 million. That\u2019s millions of positions still waiting to be filled by skilled professionals who don\u2019t yet exist.\u00a0<\/p>\n\n\n\n Altogether, there are 3.12 million open cybersecurity positions in organizations across the world<\/strong>. The total has been slightly decreasing in recent years, falling from a global workforce gap of 4.07 million in 2019. However, the world is still in a desperate need for cybersecurity specialists and this is not likely to change for some time.<\/p>\n\n\n\n <\/p>\n\n\n\n If we all have to deal with phishing messages, it helps to know where they\u2019re coming from.<\/p>\n\n\n\n <\/p>\n\n\n\n Which European jurisdictions are enforcing the General Data Protection Regulation (GDPR) rule with sanctions?\u00a0<\/p>\n\n\n\n Italy is currently leading the way with nearly \u20ac80 million of GDPR fines. Germany isn\u2019t far behind\u2014one of the hotspots for data leaks and cybercrime throughout the EU. Elsewhere, France, the UK, and Spain have all issued large totals of fines.<\/p>\n\n\n\n That being said, EU nations have been criticized for failing to enforce GDPR with significant punishments. That may be about to change: Luxembourg recently fined Amazon a record \u20ac746 million for multiple breaches of GDPR. Should Amazon fail with its appeal, Luxembourg\u2019s fine could go down as one of the largest data protection sanctions of all time.<\/p>\n\n\n\n <\/p>\n\n\n\n A \u201ccybersecurity arms race\u201d is taking place in major economies, such as the US, China, Russia, and the EU. Countries are boosting their spending on cybersecurity<\/strong>, and Russia is leading the charts with a 200% increase. Why? Because governments are realizing the importance of cyber defense, and they\u2019re building their own arsenal of deterrents amidst rising tensions. People are calling the spate of recent nation-state attacks a \u201ccyberwar\u201d.<\/p>\n\n\n\n It\u2019s clear that hacking and cyber attacks are an ever-growing threat to international security. According to HP, 70% of security experts believe a \u201ccyber-treaty\u201d is needed between states to stop things from getting out of hand<\/strong>. Unfortunately, 30% of them don\u2019t think that such an agreement will ever come to fruition. What\u2019s your take on that \u2014 do you think countries can cooperate to combat cybercrime?<\/p>\n\n\n\n <\/p>\n\n\n\n This was Part 3 of our <\/em>Hacking the World<\/em><\/strong> series.\u00a0<\/em><\/p>\n\n\n\n Read on for <\/em>Part 4: The Cost & Future of Hacking (Plus: Safety Tips)<\/em><\/strong><\/a>.\u00a0<\/em><\/p>\n\n\n\n Or check out <\/em>Part 1: Hacking Basics<\/em><\/strong><\/a> and Part 2: What\u2019s Being Hacked (And What Changed with Covid)<\/em><\/strong><\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"The Hackers & the Hacked<\/a><\/h4>\n\n\n\n
Hacking Geography<\/a><\/h4>\n\n\n\n
The Hackers & the Hacked<\/strong><\/h2>\n\n\n\n
How Many People Get Hacked?<\/strong><\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/66-1024x864.jpg\")
<\/figure>\n\n\n\n
That being said, the US has been recording cyber incidents since 2005. According to the Privacy Rights Clearinghouse, a total of over 10 billion US records have been exposed<\/strong>. That includes PII such as names, addresses, and credit card details. This makes the US the no.1 country with the most data breaches<\/strong>.<\/p>\n\n\n\nVictim Demographics<\/strong><\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/67-1024x906.jpg\")
<\/figure>\n\n\n\n
The reason behind these stats is lower computer literacy in older adults<\/strong>, which makes them more susceptible to cyber attacks and social engineering. Without sufficient knowledge on how phishing and other types of scams work, they\u2019re more likely to click on a malicious link or download a virus without realizing the risks<\/p>\n\n\n\nVulnerable Targets Inhibit Cybersecurity<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/68-1024x940.jpg\")
<\/figure>\n\n\n\n
Poor integration between systems is another cybersecurity issue for businesses. Surprisingly, though, cybersecurity professionals said money isn\u2019t much of a problem for the majority of IT departments<\/strong>.<\/p>\n\n\n\nFailure Rates Are a Vulnerability Indicator<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/69-843x1024.jpg\")
<\/figure>\n\n\n\nThe Worst Affected Industries<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/70-1024x1008.jpg\")
<\/figure>\n\n\n\nStaffing Issues Cause Security Vulnerabilities<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/70a-1024x958.jpg\")
<\/figure>\n\n\n\nThe Biggest Hacking Breaches<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/71-1024x660.jpg\")
<\/figure>\n\n\n\nMalicious Attackers Cause the Most Breaches<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/72-1024x797.jpg\")
<\/figure>\n\n\n\nHacker Motivations<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/73-1-1024x797.jpg\")
<\/figure>\n\n\n\n
Nation-state hackers collect information and disrupt other organizations on behalf of a government.<\/strong> China, the US, and Russia are three nations that are known to use these hackers. According to IBM, nation-state attacks are the most expensive due to the sensitive information they often target. They cost, on average, $4.43 million per breach.<\/p>\n\n\n\nTop Income Sources for Hackers<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/74-859x1024.jpg\")
<\/figure>\n\n\n\nNation-State Hackers: Getting Worse?<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/74a-965x1024.jpg\")
<\/figure>\n\n\n\nHacking Mercenaries: An Economy of Deception<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/74b-1024x1024.jpg\")
<\/figure>\n\n\n\n
Whatever the reason, experts concede that state-sponsored groups are directly funding organized crime<\/strong>, all in the name of cyberwars. Certainly not a good look for those nations allegedly involved.<\/p>\n\n\n\nWho Do Nation-State Hackers Target?<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/74c-1024x891.jpg\")
<\/figure>\n\n\n\nTop Hacking Groups<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/75-1024x970.jpg\")
<\/figure>\n\n\n\nMost Famous Hacking Whistleblowers<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/76-1024x853.jpg\")
<\/figure>\n\n\n\nHacking Geography<\/strong><\/h2>\n\n\n\n
Which Nations Have the Best and Worst Cybersecurity?<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/77-1024x956.jpg\")
<\/figure>\n\n\n\nCyber Attack Success: Data Breach Statistics by Country<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/78-883x1024.jpg\")
<\/figure>\n\n\n\nMost Significant Attacks<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/79-951x1024.jpg\"){kind=spacer}
<\/figure>\n\n\n\nRegions With The Most Data Breaches<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/80-1011x1024.jpg\"){kind=spacer}
<\/figure>\n\n\n\nWhich Nation Has the Most Data Centers?<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/80a-1024x1024.jpg\")
<\/figure>\n\n\n\nThreat Categories Around the World<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/81-1024x803.jpg\")
<\/figure>\n\n\n\n
Botnet is the leading malware category<\/strong>, with 30% of APAC companies suffering a botnet attack in 2020. The results are consistent across all regions: botnet is the most prevalent malware, followed by cryptominers, infostealers, mobile, banking, and ransomware.<\/p>\n\n\n\nData Breach Cost by Region<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/84-610x1024.jpg\")
<\/figure>\n\n\n\nData Protection Around the World<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/85-1024x801.jpg\")
<\/figure>\n\n\n\nWhere Are Hackers From?<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/86-1024x801.jpg\")
<\/figure>\n\n\n\nCybersecurity Staffing Gap by Nation<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/86a-626x1024.jpg\")
<\/figure>\n\n\n\nCybersecurity Staffing Gap by Region<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/86b-1024x1007.jpg\")
<\/figure>\n\n\n\nThe Source of Spam<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/87-1024x956.jpg\")
<\/figure>\n\n\n\n
Kaspersky found that Russia is the king of spam<\/strong>. While a large portion of phishing messages originate in China, Germany, and the US, Russia sends more spam than anyone else, accounting for 22.47% of malicious messages. At the other end, Brasil generates the least phishing emails<\/strong> \u2014 less than 5% of all spam messages seem to originate from there.<\/p>\n\n\n\nGDPR Hot Zones<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/87a-1024x932.jpg\")
<\/figure>\n\n\n\nWho\u2019s Investing in the Cybersecurity Arms Race?<\/strong><\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2021\/10\/87b-930x1024.jpg\")
<\/figure>\n\n\n\n