By comparison, Verizon’s first report in 2008 looked at 500 incidents spread over a three-year period.

He added that in 2008 nobody had really thought to quantify and measure cyberattacks.

Ransomware grabbed headlines in 2021, as high-profile attacks hit companies includingColonial PipelineandJBS USA.

Fifteen years ago, ransomware was barely a factor, the report notes.

While researchers spotted it in 2008, ransomware attacks didn’t generate enough data to write about until 2013.

“The only sure consumer of a company’s data is the company itself,” Pinto said.

“It’s much simpler.”