Skip to main content

March 26, 2025

SecurityScorecard 2025 Global Third-Party Breach Report reveals surge in vendor-driven attacks

Summary

SecurityScorecard released its latest findings in the 2025 Global Third-Party Breach Report, revealing that 35.5% of breaches in 2024 were related to third parties. The report analyzed 1,000 breaches across various industries and regions to identify attack patterns and assess the impact of security failures linked to vendor relationships. Ryan Sherstobitoff, Senior Vice President of SecurityScorecard’s STRIKE Threat Research and Intelligence, noted that threat actors increasingly exploit third-party access for their operations. The report suggests that organizations should prioritize real-time monitoring of vendors over periodic reviews to better manage risks associated with third-party access. Key findings highlight a decreasing focus on technology sector breaches, now accounting for 46.75% of third-party incidents, compared to 75% previously. Retail and hospitality industries reported the highest rates of third-party-related breaches, while healthcare, although reporting the most breaches, experienced below-average rates. The report also pinpoints global hotspots like Singapore and the Netherlands, which reported significantly higher breach rates than the United States.

Our summary. The original keeps its own byline.

Companies in this article

Topics

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "legalName": "Wiretap Labs, LLC",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/securityscorecard-2025-global-third-party-breach-report-reveals-surge-in-vendor-driven-attacks/",
        "name": "SecurityScorecard 2025 Global Third-Party Breach Report reveals surge in vendor-driven attacks",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/securityscorecard-2025-global-third-party-breach-report-reveals-surge-in-vendor-driven-attacks/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/securityscorecard/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/securityscorecard/",
      "name": "SecurityScorecard"
    },
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
      "@type": "Person",
      "name": "Decision Insights Coverage",
      "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
    },
    "dateModified": "2026-08-23T14:48:28-06:00",
    "datePublished": "2025-03-26T04:10:02-06:00",
    "description": "SecurityScorecard's report shows 35.5% of breaches in 2024 were third-party related, emphasizing vendor risk management needs.",
    "headline": "SecurityScorecard 2025 Global Third-Party Breach Report reveals surge in vendor-driven attacks",
    "keywords": [
      "Threats"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/securityscorecard-2025-global-third-party-breach-report-reveals-surge-in-vendor-driven-attacks/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/securityscorecard/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/securityscorecard/",
        "name": "SecurityScorecard"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
    "@type": "Person",
    "description": "Blog posts, podcasts, and video analysis from across the industry, condensed into short, sourced summaries. Produced under our Standards & Methodology.",
    "name": "Decision Insights Coverage",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
  }
]

Is this your company? Get structured data for your own pages