Skip to main content

SecurityScorecard 2025 Global Third-Party Breach Report reveals surge in vendor-driven attacks

Source Decision Insights Record Published April 1, 2025 Companies 1
Human View Machine View

6th article in the last 90 days, one of 6 articles referencing SecurityScorecard. Previous coverage: Sector Intelligence: AI and Automation Advancements in 2025 (Mar 2025).

Companies mentioned

SecurityScorecard released its 2025 Global Third-Party Breach Report, analyzing 1,000 breaches to highlight patterns in third-party vulnerabilities. The report found that 35.5% of all breaches in 2024 were related to third parties. It noted a significant decrease in third-party breaches within the technology sector, dropping from 75% last year to 46.75%. The retail and hospitality industries reported the highest breach rates at 52.4%, followed closely by technology at 47.3% and energy at 46.7%.

Ryan Sherstobitoff, Senior VP of SecurityScorecard’s STRIKE Threat Research, stated, “Threat actors are prioritizing third-party access for its scalability. Our research shows ransomware groups and state-sponsored attackers increasingly leveraging supply chains as entry points.” He emphasized the need for security leaders to shift from periodic vendor assessments to real-time monitoring to address these growing risks.

The report also identified geographical hotspots for breaches, with Singapore reporting 71.4% of breaches linked to third parties, while the U.S. had a lower rate of 30.9%. Additionally, it revealed that 41.4% of ransomware attacks now initiate through third-party channels.

Among the actionable strategies suggested to mitigate risks are matching Third-Party Risk Management (TPRM) efforts to specific organizational profiles, enhancing vendor security requirements, and implementing built-in security measures in technology procurement.

To access the full report, visit SecurityScorecard’s website.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/securityscorecard-2025-global-third-party-breach-report-reveals-surge-in-vendor-driven-attacks-2/",
        "name": "SecurityScorecard 2025 Global Third-Party Breach Report reveals surge in vendor-driven attacks",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/securityscorecard-2025-global-third-party-breach-report-reveals-surge-in-vendor-driven-attacks-2/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/securityscorecard/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/securityscorecard/",
      "name": "SecurityScorecard"
    },
    "articleSection": [
      "Cybersecurity"
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
      "@type": "Person",
      "name": "Decision Insights Record",
      "url": "https://decisioninsights.ai/author/decision-insights-signals/"
    },
    "dateModified": "2026-08-23T13:17:20-06:00",
    "datePublished": "2025-04-01T12:42:32-06:00",
    "description": "SecurityScorecard's 2025 Global Third-Party Breach Report highlights the rise in vendor-driven attacks and strategies for risk mitigation.",
    "headline": "SecurityScorecard 2025 Global Third-Party Breach Report reveals surge in vendor-driven attacks",
    "keywords": [
      "Ransomware",
      "Third-Party Risk Management",
      "Threats"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/securityscorecard-2025-global-third-party-breach-report-reveals-surge-in-vendor-driven-attacks-2/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/securityscorecard/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/securityscorecard/",
        "name": "SecurityScorecard"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
    "@type": "Person",
    "description": "Press releases and independent analyst research, structured into concise summaries for research and monitoring. Produced under our Standards & Methodology.",
    "name": "Decision Insights Record",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-signals/"
  }
]

Is this your company? Get structured data for your own pages