Survey Reveals Nearly Half of Data Breaches Involve Third-Party Remote Access
- Securityish
- Threats & Incidents
Quick Summary
A recent survey by the Ponemon Institute for Imprivata found that 47% of organizations experienced a data breach involving third-party access in the past year. The survey, which included 1,942 IT professionals, revealed that 48% identified third-party remote access as the most common attack vector. Alarmingly, nearly two-thirds of respondents expect the frequency of such breaches to either increase or remain the same over the next 12 to 24 months, highlighting significant risks in third-party security management.
The Securityish Brief
The Ponemon Institute conducted a survey on behalf of Imprivata, involving 1,942 IT and IT security practitioners. The findings indicate that 47% of organizations faced a data breach or cyberattack in the last 12 months due to third-party access. Notably, 48% of respondents identified third-party remote access as the primary attack vector. Furthermore, 34% of organizations impacted by these breaches had granted excessive privileged access to third parties.
Respondents expressed concern about the future, with nearly two-thirds expecting the prevalence of third-party-related data breaches to either increase or stay the same over the next 12 to 24 months. A significant barrier to mitigating these risks is insufficient resources or budget, cited by 41% of participants. Many organizations reported spending an average of 134 hours per week managing and analyzing third-party access security.
The consequences of these breaches are severe, with 53% of affected organizations reporting the loss or theft of sensitive information, 50% facing regulatory fines, and 49% severing relationships with compromised third parties. Alarmingly, 35% of respondents were unsure how the cyberattacks occurred, indicating a lack of visibility into their security posture.
Organizations often grant remote access privileges without fully considering the cybersecurity implications, leading to potential vulnerabilities. Continuous monitoring and auditing of third-party access are essential to ensure compliance with security mandates. While the integration of artificial intelligence may enhance auditing capabilities in the future, organizations must currently reassess how remote access privileges are managed.
Key Takeaways
- Review and limit third-party access privileges to essential applications and systems.
- Conduct regular audits of who has remote access and ensure compliance with security policies.
- Allocate sufficient resources and budget to manage third-party security risks effectively.
- Implement continuous monitoring of third-party access to detect any unauthorized activities.
- Educate internal teams on the cybersecurity implications of granting remote access.
Key Terms & Concepts
- Ponemon Institute: The Ponemon Institute is a research organization focused on privacy, data protection, and information security.
- Imprivata: Imprivata is a provider of a platform for managing digital identities and securing access to healthcare applications.
- third-party access: Third-party access refers to the ability of external vendors or partners to access an organization’s network or systems.
- privileged access: Privileged access is a level of access that allows users to perform administrative tasks and access sensitive information.
Read the original article here: https://securityboulevard.com/2025/12/survey-nearly-half-of-data-breaches-involved-third-party-remote-access-2/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
