--- title: "Threats: the cyber risks facing businesses | Firevault" description: "Ransomware, insider misuse, third-party compromise and human error all target online data. Offline secure storage can help remove that exposure." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/threats#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Threats: the cyber risks facing businesses", "item": "https://fire-vault.com/threats" } ] }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/threats#webpage", "url": "https://fire-vault.com/threats", "name": "Threats: the cyber risks facing businesses", "description": "Ransomware, insider misuse, third-party compromise and human error all target online data. Offline secure storage can help remove that exposure.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-threats.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/threats#breadcrumb" } } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches)[2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Live threat monitor # The global data theft crisis, as it happens Every second, thousands of files are taken from connected systems. This page tracks the scale of the problem, the root causes behind it, and why physical disconnection is the one control an attacker cannot reach across a network. [Why Offline Secure Storage®](/why-oss) [Get started](/get-started) Estimated files stolen in 2026 424,618,200,000 Rising by 20,000 every second, based on Cybersecurity Ventures projections of more than 50 billion files stolen each year. Every one of those files was reachable over a network. £8.7T+ Global cybercrime cost Cybersecurity Ventures £210B Ransomware cost by 2031 Cybersecurity Ventures £3.9M Average breach cost IBM Cost of a Data Breach 277 days Time to contain a breach IBM Cost of a Data Breach Root causes ## Why breaches keep happening Four causes account for the overwhelming majority of incidents. The common thread is that the compromised data was connected. [ 74% ### Human error Phishing, weak passwords and social engineering remain the primary entry points for attackers. Read the brief on Human error ](/threats/human-error) [ 60% ### Unpatched vulnerabilities Known vulnerabilities left unpatched give attackers a reachable route into connected systems. Read the brief on Unpatched vulnerabilities ](/threats/vulnerabilities) [ 45% ### Third party breaches Supply chain attacks and supplier compromises expose customer data at scale. Read the brief on Third party breaches ](/threats/third-party) [ 44% ### Ransomware Ransomware is present in 44 per cent of all breaches analysed in the latest reporting year. Read the brief on Ransomware ](/threats/ransomware) Recent incidents ## Breaches that made the headlines Large organisations with substantial security budgets are not exempt. In every case the data was reachable. ### Change Healthcare 2024 Ransomware attack on healthcare infrastructure Records 100M+ patients Cost £1.3 billion ### MOVEit 2023 Zero day exploit in file transfer software Records 77 million people Cost Ongoing ### MGM Resorts 2023 Social engineering attack Records Undisclosed Cost £79 million ### 23andMe 2023 Credential stuffing attack Records 6.9 million users Cost Ongoing litigation ### Bybit 2025 State sponsored crypto theft Records Not applicable Cost £1.2 billion ### Marks and Spencer 2025 Social engineering into the retail estate Records 9.4 million customers Cost £300 million profit impact [View the full Cybersecurity Almanac](https://cybersecurityventures.com/cybersecurity-almanac-2025/) The answer ## Every breach shares one condition. Remove it. The data was connected to a network. Offline Secure Storage® removes the Layer 1 connection entirely, so the data is physically disconnected rather than protected by policy. [Protect your data](/vault) [See the four foundations](/why-oss) Physical hardware. Physical disconnection. Physical control. A physical location you can name. Those four physical foundations are what make Offline Secure Storage® different from every connected platform on this page.