While these read like standard operating procedures, buttoning them down will substantially reduce your risks. A 2015 industry report found nearly 30% of data breaches are attributable to weak passwords. These measures are particularly important for POS devices. During installation, POS vendors often use system default passwords for simplicity but fail to change them later. And the default passwords can be easily obtained online by criminals.