{
    "statement": "of breaches started with attackers exploiting a software vulnerability, now the top way in, ahead of stolen credentials (13%)",
    "value_display": "31%",
    "value_numeric": 31,
    "unit": "%",
    "data_label": "Nov 2024 to Oct 2025",
    "data_period_end": "2025-10-31",
    "region": "Global",
    "size": "all",
    "source": {
        "name": "Data Breach Investigations Report (DBIR)",
        "publisher": "Verizon Business",
        "type": "vendor",
        "url": "https://www.verizon.com/"
    },
    "source_url": "https://www.verizon.com/business/resources/T544/reports/2026-dbir-data-breach-investigations-report.pdf",
    "source_quote": "Exploitation of vulnerabilities is now the most common initial access vector for breaches. It has risen to 31% in this year’s reporting dataset, while credential abuse—the previous leader—is down to 13%.",
    "verification_note": "Read in the Verizon 2026 DBIR PDF on verizon.com. Key findings p.10; base is non-Error, non-Misuse breaches with a known vector (n=19,905). Matches data.js.",
    "verified_at": "2026-10-23T00:00:00+00:00",
    "margin_of_error": null,
    "dont_know": null,
    "data_table": null,
    "revisions": [],
    "page_url": "https://digitaltreed.com/statistics/cybersecurity/breaches-start-with-vulnerability-exploitation",
    "csv_url": "https://digitaltreed.com/statistics/cybersecurity/breaches-start-with-vulnerability-exploitation.csv"
}