#United States #IT Security #Data Breaches #Poway #Apricorn

The Alarming Surge in Data Breaches: An Research Overview

In today's digital landscape, the security of sensitive organizational data is under more scrutiny than ever before. A recent study conducted by Apricorn sheds light on a troubling trend in the management of data breaches within U.S. organizations; it indicates a notable increase in awareness about breaches that are reported by external parties as opposed to internal sources.

According to the 2026 survey involving 400 IT security decision-makers from the U.S. and U.K., 49% of U.S. respondents reported that breaches were identified by someone outside their organization. This marks a staggering rise from just 12% in 2025. Alarmingly, this figure surpasses the 47% of incidents where organizations took the initiative to notify authorities about breaches or potential breaches. Amid this scenario, employees—both remote and in-office—are being singled out as the most significant cyber threat, a concern echoed by 86% of IT leaders surveyed.

The Implications of External Reporting

Kurt Markley, Managing Director at Apricorn, states that when breaches are identified by external parties before organizations recognize them, it highlights severe visibility issues. Markley indicates that effective protection cannot take place without understanding where sensitive data resides and how it is utilized. As the external reporting surge illustrates, companies must prioritize stronger oversight mechanisms across all areas of business—employees, devices, third-party vendors, and any environment where corporate data circulates.

The dramatic rise in breaches reported by external stakeholders implies that customers, suppliers, and business partners are often becoming aware of security incidents before the affected organization does. In an age where supply chains are tightly interconnected, there is less opportunity to manage data incidents internally before they come to light externally.

Insider Risks and Employee Behaviors

The survey continues to underscore a widespread fear regarding the potential for employees to inadvertently or intentionally cause data breaches. A significant 35% of U.S. respondents admitted that remote or mobile employees had knowingly compromised corporate data security over the past year, while another 41% anticipated the same in regard to future breaches involving mobile staff. Furthermore, 36% expressed concerns that mobile or remote employees would comply with security policies but were ill-equipped with the necessary technology or skills to maintain data security.

Markley emphasizes that insider risks are not solely linked to malicious employees but can arise from ordinary errors as well. Common oversights like using unauthorized USB devices or accessing corporate data on personal devices can prove detrimental and lead to sensitive information leaving the organization’s control.

The survey data reveals that 19% of U.S. organizations attribute malicious behavior from employees as a principal cause of data breaches, while 26% point to unintentional actions by staff as a contributing factor. This shift in the nature of breaches signifies that many organizations are improving their defenses against traditional cyber threats, like phishing and ransomware. The frequency of phishing attacks reported as breaches has decreased from 32% in 2025 to 23% this year. Ransomware incidents have also seen a slight decline from 21% to 19%.
However, breaches now primarily occur due to third parties mishandling sensitive corporate information, with 32% citing this as a leading cause.

The Path Forward: Balancing Security and User Responsibility

Despite the grim outlook presented by the research, both U.S. and U.K. companies are bolstering their cybersecurity efforts. Almost all respondents confirm that they have implemented an information security strategy that governs employees’ use of personal IT devices for remote work. Moreover, a noteworthy 98% have escalated efforts to employ encryption over the last year. Yet, there remains an acknowledgment that policies alone are insufficient to ward off breaches. A concerning 34% of U.S. respondents accept that even informed employees can sometimes mismanage data, resulting in security breaches.

Markley concluded by reinforcing the need for a transformative shift in the cybersecurity approach within organizations. There needs to be a growing focus on lessening the reliance on employees to make flawless decisions regarding data privacy and security. Organizations should invest in robust controls that safeguard sensitive data irrespective of who is managing it and wherever it may travel because human error and malicious acts must both be anticipated and prepared against.

Methodology and About Apricorn

The information discussed here is based on research conducted by Censuswide among 200 U.S. and 200 U.K. IT security decision-makers between July 1 and July 6, 2026, with the previous edition from May 2025. Apricorn, a leading manufacturer of hardware-encrypted storage solutions, has upheld high standards for four decades in various security-sensitive domains, including government and healthcare.

This analysis serves as a compelling wake-up call for organizations to enhance their internal visibility and control mechanisms to protect against security incidents while relying not just on employee vigilance but also on tangible, effective cybersecurity solutions.