2019 was a banner year for breaches. Some of the biggest victims included social media heavy-hitters Facebook and TikTok, as well as financial dynamo Capital One. They’re just the tip of the iceberg: according to Forbes, over 3,000 breaches in 2019 tallied up to 4.1 billion compromised data records. That’s a whopping 22.5 million records stolen by cyberattackers every day of last year.
We know from our 10th annual State of Software Security (SOSS) report that security debt is a major contributor to the risk of such breaches and attacks. We also learned that those who scan their code for security issues more frequently (300+ times per year) vastly reduce the amount of debt (and risk) they carry. DevSecOps programs that institute more frequent application scanning cadences and break down silos between security and development teams can be a leap forward for organizations like the ones that fell victim to attacks last year.
As cybersecurity becomes a more complex issue, businesses that handle sensitive data – from passwords to Social Security numbers, banking information, and even medical records – should take this ever-prevalent problem seriously in 2020 and beyond. Here’s a look at six of the biggest breaches we saw in 2019.