Incidents involving data theft from the outside account for the majority of attacks. The proportion of incidents with an insider agent doubled to 48 percent, while attacks with an external hacker dropped to 70 percent. The driving factor behind the increase in insider attacks was the inclusion of a new data set in Verizon’s database. The U.S. Secret Service added a large number of incidents where the victim had a better idea of the identity of the attacker and believed the person could be prosecuted. Verizon still sees external attackers as the major threat, however, however.”]
Source: https://www.darkreading.com/attacks-breaches/inside-verizon-s-insider-threat-data