Ransomware Data Breaches' Growth Last Year Equal to Last 5 Years Combined, Verizon Report Says

Data breaches resulting from ransomware attacks increased 13% last year — equal to the last five years’ increase combined — and are impacting more education organizations than ever, according to the recently released Verizon Business 2022 Data Breach Investigations Report.

The research is based on analysis of 914,547 incidents, 234,638 breaches, and 8.9 TBs of cybersecurity data since the first DBIR 15 years ago, Verizon said; the incident information is from Verizon Business data as well as 87 partners in the telecommunications and cybersecurity industries.

Researchers analyzed 23,896 cyber incidents last year, with 5,212 of those being data breaches, the report said.

In the education sector, DBIR researchers analyzed 1,241 cyber incidents, with 282 of those resulting in data breaches.

Key Findings Among Education Cyber Incidents:

  • 139 of the data breaches included the use of malware.
  • 123 of the data breaches were initiated by system intrusions.
  • 55 of the data breaches were initiated by basic web application attacks
  • 51 breaches resulted from from miscellaneous errors by humans.
  • Malware was found to in 437 of all education cyberattacks.
  • 790 of all cyberattacks were classified as hacking attempts.
  • 643 of all cyberattacks were classified as denial of service attacks.
  • 95% of all cyberattacks targeted the education organization’s servers.
  • 75% of cyber incidents were initiated by external threat actors.
  • 95% of breaches were motivated by threat actors seeking data for financial gain.
  • 63% of the data compromised was classified as personal, identifiable information.
  • 41% of data compromised was credentials.

The DBIR report noted that about four in five breaches is attributable to organized crime, adding that human error — primarily, misconfigured cloud storage — continues to be a dominant trend and is responsible for 13% of breaches. Internal sources accounted for just 18% of cyber incidents, the report said.

Learn more and download the full report at the Verizon Business website.

About the Author

Kristal Kuykendall is editor, 1105 Media Education Group. She can be reached at [email protected].


Featured

  • DreamBox Math

    Discovery Education Announces Updates to Experience, DreamBox Math

    K-12 learning solution provider Discovery Education has announced enhancements to its Discovery Education Experience and DreamBox Math products, designed to create a more personalized, engaging learning experience for students.

  • abstract pattern of cybersecurity, ai and cloud imagery

    Report Identifies Malicious Use of AI in Cloud-Based Cyber Threats

    A recent report from OpenAI identifies the misuse of artificial intelligence in cybercrime, social engineering, and influence operations, particularly those targeting or operating through cloud infrastructure. In "Disrupting Malicious Uses of AI: June 2025," the company outlines how threat actors are weaponizing large language models for malicious ends — and how OpenAI is pushing back.

  • digital dashboard featuring a shield icon, graphs, a world map, and network nodes

    IBM Launches Agentic AI Governance and Security Platform

    IBM has introduced a new software stack for enterprise IT teams tasked with managing the complex governance and security challenges posed by autonomous AI systems.

  • laptop and fish hook

    Security Researchers Identify Generative AI 'Vishing' Attack

    A new report from researchers at Ontinue's Cyber Defense Center has identified a complex, multi-stage cyber attack that leveraged social engineering, remote access tools, and signed binaries to infiltrate and persist within a target network.