Tech firm attacks drive majority of third party data breaches

Financial and risk advisory provider Kroll found that 69 percent of data breach victims between June 2025 and June 2026 were affected by a third-party breach, InfoSecurity Magazine reported. Compromised technology companies were responsible for 79 percent of those exposed individuals. [1]

According to InfoSecurity Magazine, technology sector incidents caused far more third-party data exposures than other industries. Finance accounted for nine percent of third-party breaches, insurance caused six percent, and healthcare represented five percent. Technology firm incidents also generated 60 percent of the total volume of data breach victims overall. [1]

Separate disclosures highlight recent corporate exposures. SecurityWeek reported that Japanese gaming company Capcom discovered unauthorized access to its CAPCOM ID service on October 19. Hackers stole 11,774,247 email addresses and altered login passwords for 196 accounts. SecurityWeek also reported that Quest Diagnostics disclosed unauthorized access to its Quanum Lab Services Manager platform, exposing certain patient records. [3][6]

A data breach involves the unauthorized exposure, disclosure, or loss of personal information. Technical root causes include accidental disclosure, stolen unencrypted devices, system hacking via software vulnerabilities, and phishing attacks. [9]