Cybersecurity Survey Reveals 71% of Organizations Hit by Third-Party Security Incidents

What's Happening?

A recent survey conducted by SecurityScorecard has revealed that 71% of organizations experienced at least one material third-party cybersecurity incident in the past year. The survey, which included responses from 546 IT directors and CISOs, highlights the growing risk associated with third-party involvement in cybersecurity breaches. Supporting data from the 2025 Verizon Data Breach Investigations Report indicates that third-party involvement in breaches has doubled in recent years, increasing from 15% to nearly 30%. Greg Sullivan, founding partner at cybersecurity services firm CIOSO Global, emphasized that organizations often allow online access to third parties without applying the same scrutiny as they do with their internal software, creating vulnerabilities that adversaries exploit.

Why It's Important?

The findings underscore the critical need for organizations to reassess their cybersecurity strategies, particularly concerning third-party access and involvement. As third-party breaches become more prevalent, companies face increased risks of data loss, financial damage, and reputational harm. This trend highlights the importance of implementing robust cybersecurity measures and protocols to safeguard sensitive information. Organizations that fail to address these vulnerabilities may face significant consequences, including regulatory penalties and loss of consumer trust. The survey results serve as a wake-up call for businesses to prioritize cybersecurity and strengthen their defenses against third-party threats.

What's Next?

Organizations are likely to reevaluate their cybersecurity policies and practices, focusing on enhancing third-party risk management. This may involve stricter access controls, comprehensive audits, and increased scrutiny of third-party vendors. Cybersecurity firms may also see increased demand for services that help businesses identify and mitigate third-party risks. As awareness of these issues grows, industry leaders and policymakers may push for more stringent regulations and standards to protect against third-party breaches. Companies that proactively address these challenges will be better positioned to safeguard their assets and maintain consumer trust.