Organized crime was responsible for 85 percent of all stolen data in 2009. Stolen credentials were the most common way to gain unauthorized access into organizations. Ponemon Institute: Web-borne attacks, malicious code and insiders are the most costly cybercrime costs per organization per year. An average web-based attack costs $143,209; malicious code $124,083; and malicious insiders, $100,300. An incident incurred by a malicious insider, for instance, takes an average of 42 days or more to resolve.”]
Source: https://www.govinfosecurity.com/blogs/tale-three-breach-reports-p-644