This year’s dataset is made up of over 100,000 incidents, of which 3,141 were confirmed data breaches. Of these, 64,199 incidents and 2,260 breaches comprise the finalized dataset that was used in the analysis and figures throughout the report. We address the reasons for culling the dataset in Victim Demographics and provide additional details when we discuss motives in Breach Trends.

2016 Verizon Data Breach Investigations

“It’s like déjà vu, all over again.” —Yogi Berra.

Of course, we would never suggest that every last security event of 2015 is in this report. We acknowledge sample bias, and provide information about our methodology as well as links to resources that we encourage you to look into to help collect and analyze incident data within your own organization, in Appendix E.
We will also acknowledge what isn’t in this report. For those looking for proclamations about this being the year that mobile attacks bring us to our knees or that the Internet of Things (IoT) is coming to kill us all, you will be disappointed. We still do not have significant real-world data on these Nine times? Nine times.

2016 DBIR—Introduction

The nine incident classification patterns we identified in 2014 still reign supreme. Verizon 2016 Data Breach Investigations Report technologies as the vector of attack on organizations. If you feel we are in error, put down the torches and pitchforks and share any breach data that you
have. We are always looking for avenues to shine lights into areas in which we may not have sufficient illumination.

The report is designed so you can enjoy it like a prog-rock concept album, from beginning to end, or feel free to bounce around (the room). Enjoy the Breach Trends section for all your figure and chart needs.