U.S. common insider threat types 2020

A 2020 study found that data exfiltration was the most common type of insider threat, followed by privilege misuse. Data exfiltration accounted for 62 percent of insider threats caused by employees and contractors. The loss of sensitive data can cost a business millions of dollars and severely damage its reputations.

Most common types of insider threats in the United States in 2020

Characteristic	Share
Data exfiltration	62%
Privilege misuse	19%
Data aggregation/snooping	9.5%
Infrastructure sabotage	5.1%
Circumvention of IT controls	3.8%
Account sharing	0.6%

Loading statistic...

Download

Source

Show detailed source information?

Already a member?

Source

Use Ask Statista Research Service

Release date

May 2020

More information

Region

United States

Survey time period

2020

Number of respondents

300 incidents

Special properties

across 8 different industry verticals

Supplementary notes

The source defines insider threat as follows:
An insider threat is the risk posed by employees or contractors regarding the theft of sensitive data, misuse of their access privileges, or fraudulent activity that puts the organization’s reputation and brand at risk. The insider’s behavior can be malicious, complacent, or ignorant, which in turn can amplify the impact to the organization resulting in monetary and reputational loss.

The source does not provide exact information regarding the date of survey. Region presumed.

Citation formats