One of the key parameters determining the extent of the damage caused by an attack is whether the incident led to
internal data being leaked. According to the survey, an average of 35% of companies experienced data leaks as a
result of external attacks. In 25% of cases this involved leaks of important data, the disclosure of which could
damage the business interests of the affected companies. Malware attacks caused the greatest damage: they
resulted in leaks of valuable sensitive information in 12% of cases. These were followed, with 5-6%, by phishing
attacks, network intrusion/hacking and theft of mobile devices. Remarkably, according to the survey results even
targeted corporate espionage which does not affect IT systems causes less damage, percentagewise (4%), than
cyberthreats.