Backups are one of the most important and effective security measures commonly used. They don\u2019t prevent your organization from being breached, but they can help you recover more quickly when your systems are <\/em>compromised. Despite this, only 24% of organizations<\/a> have a mature disaster recovery plan that\u2019s well-documented, tested, and updated. <\/p>\n We\u2019ve collected the most recent cloud backup and recovery statistics from around the world to illustrate the importance of backing up your cloud data. These stats come from third-party surveys and reports, and we\u2019ll be updating them as new research emerges to help you stay on top of the latest figures. <\/p>\n According to a recent survey<\/a>, 79% of companies have experienced at least one<\/em> cloud data breach, and 43% have reported 10 or more<\/em> breaches in recent years. Considering that 92% of organizations<\/a> are currently hosting at least some of their data in the cloud, that means the majority of all businesses around today have experienced a cloud data breach. <\/p>\n Almost half of all data breaches<\/a> occur in cloud-based systems. Part of the reason for this lies in the fact that many organizations were forced to migrate to the cloud rapidly during the COVID-19 pandemic, enabling employees to continue working from wherever they\u2019re based. This fast rate of adoption meant that many businesses have overlooked security in the name of productivity; thus, they were using tools that were \u201clifted and shifted\u201d from on-prem environments rather than being purpose-built for the cloud. In fact, 54% of businesses<\/a> use applications that have been moved to the cloud from an on-prem environment, with the most common culprits being larger enterprises, with SMBs more likely to have taken a cloud-native approach. <\/p>\n Since then, many organizations have been retroactively securing their cloud environments to protect themselves against cloud-based cyberthreats. But what exactly are the biggest causes of data loss within cloud environments?<\/p>\n 76% of organizations<\/a> have experienced critical data loss, and 45% of those businesses lost their data permanently as a result. Some of the most commonly cited causes of data breaches include human error, cyber-attacks (specifically ransomware and account takeover), hardware failures, and natural disaster.<\/p>\n Human error is one of the leading causes of data breaches. In fact, a recent report from ITIC<\/a> found that 64% of downtime events are related to human errors, such as device mismanagement or misconfiguration, and inadvertent data loss. <\/p>\n According to Verizon\u2019s most recent DBIR<\/a>, misconfiguration errors<\/strong> are the second most common cause of breach. <\/p>\n Misconfiguration is when someone sets up computing assets incorrectly, leaving them vulnerable to malicious activity and making it more difficult for security teams to identify breaches. One of the main misconfiguration mistakes is the incorrect setup of access permissions, which often results in users being granted permission to access more areas of the network than they actually need. <\/p>\n Unfortunately, this is a very common problem: more than 90%<\/a> of cloud identities are using less than 5% of the permissions they\u2019ve been granted, and 33% of all folders<\/a> used by a company are open to everyone. In other words, 64% of employees have access to 1,000 or more sensitive files, on average.<\/p>\n Attackers can exploit accounts with misconfigured permissions to gain access to critical company data without being detected by security teams. <\/p>\n Data deletion<\/strong> is another common cause of compromise that often stems from human error. A recent survey<\/a> found that malicious deletion is the<\/em> most common cause of SaaS data loss, responsible for 25% of incidents, while accidental deletion is responsible for 20%. <\/p>\n Another survey reported that 67% of Americans<\/a> who own a computer admit to having accidentally deleted something, and 44% report having lost access to their data when a shared drive or synced drive was deleted. <\/p>\n While human error and misconfiguration are the second leading cause of breach, Verizon\u2019s report<\/a> gave the top spot to hacking. <\/p>\n In the last year, 75% of organizations globally<\/a> experienced a social engineering attack, also known as \u201cphishing\u201d. In a phishing attack, a bad actor contacts their target\u2014usually via email<\/a>\u2014posing as a trusted sender, such as a colleague or service provider. During their communication, the attacker tries to manipulate their target into handing over sensitive data directly, downloading malware, or entering their credentials on a fake phishing page<\/a> disguised to look like a legitimate domain. This last one is a particular problem when it comes to cloud data, as content delivery networks and cloud file share services enable their customers to host their own content on a legitimate domain. This gives genuine users increased storage, but it also gives cybercriminals a seemingly legitimate domain on which they can host malicious files. <\/p>\n Ransomware is on the rise. Two out of three midsize organizations<\/a> have suffered from a ransomware attack in the last 18 months. In the past year, there has been an 85% increase<\/a> in incidents that involved employees having their names and other personal data published on the dark web, and a 144% increase in the average ransom demand. So, not only are ransomware attacks on the rise, but they\u2019re becoming increasingly expensive for victims to recover from. <\/p>\n 59% of ransomware incidents<\/a> where the data is successfully encrypted involve data in the public cloud; either the data is stolen from the public cloud, or the attacker stores the stolen data in the public cloud while they wait for their ransom payment. The most common cloud storage services used for this purpose are Google Drive, Amazon S3, and Mega.nz. By sending exfiltrated data to legitimate services such as these makes it more difficult for the victim to locate their data. <\/p>\n And unfortunately, 97% of modern ransomware incidents<\/a> attempt to infect primary systems, in addition to backup repositories. This statistic highlights the need for a secure <\/em>backup service<\/a> that includes anti-tampering and ransomware detection technology, and a disaster recovery plan<\/a> that is regularly tested and updated. <\/p>\n Hard drive failures and service outages are a common cause of downtime and data loss, with service outages causing 22% of SaaS data loss<\/a>. And these incidents are more common than you might think; 48% of Americans<\/a> have had an external hard drive crash, and 21% of those crashed have occurred in the last year. <\/p>\n Almost a quarter of organizations<\/a> associate old and inadequate server hardware with reliability issue and downtime\u2014while that doesn\u2019t necessarily mean permanent data loss, it can still cause huge disruptions to business operations. In the event of extended downtime, it can be very useful to have backups from which you can continue to work. <\/p>\n While only 5% of business downtime<\/a> is caused by natural disasters such as floods, fires, and earthquakes. These disasters can prove incredibly difficult to recover from unless you have backups in place, as they can destroy entire physical servers. <\/p>\n However, you can\u2019t rely on just any <\/em>backups to prevent your organization losing data to a natural disaster\u2014they must be stored in a separate location, such as a cloud environment. If you store your backups locally, they could be destroyed in the same disaster that takes down your primary systems. <\/p>\n Despite the risks that the above incidents pose, many organizations still aren\u2019t properly backing up their data. Let\u2019s take a closer look at the numbers. <\/p>\n One third of organizations<\/a> only have poorly documented disaster recovery plans in place, and 41% don\u2019t update their plans. When it comes to small- and medium-sized business specifically, 51% don\u2019t have an incident response plan at all<\/a>. <\/p>\n With that in mind, it comes at little surprise that only 10% of IT users back up their computer data daily; a statistic corroborated by two independent studies conducted by Backbaz<\/a>e and Acronis<\/a>. According to Backbaze, 11% of users create backups weekly, 20% create backups monthly, 13% create them yearly, 26% create them less than once a year, and 20% have never backed up their data. <\/p>\n Unfortunately, Acronis\u2019 report shows similar findings: 15% of users back up once or twice a week, 34% back up monthly, and a staggering 41% of users rarely or never back up their data. <\/p>\n In the charts below, we\u2019ve combined Backbaze\u2019s results for \u201cyearly\u201d, \u201cless than yearly\u201d and \u201cnever\u201d for a more direct comparison. <\/p>\n Acronis\u2019 report found that IT managers are a little better at backing up their data than most IT users; a third of IT managers create backups weekly and 25% create monthly backups. Additionally, 20% of IT managers claim to also test<\/em> the restoration of their backups weekly.<\/p>\n According to a recent study, 91% of organizations<\/a> use some form of backup to protect their databases. But unfortunately, not all types of data are given the same level of security; 62% of organizations<\/a> back up proprietary application data, but only 28% back up research and development data. Despite the increasing reliance on SaaS applications amongst modern businesses, fewer than one in five organizations<\/a> back up their SaaS data. Considering that almost half<\/a> of SaaS tool users have experienced data loss, this figure is quite alarming\u2014but it usually comes down to the common misconception that SaaS providers will back up the data you store in their application for you. <\/p>\n Unfortunately, this isn\u2019t the case. SaaS applications are built on a shared responsibility model, which means that the SaaS provider is responsible for the infrastructure <\/em>of the application (e.g., the datacenter, network controls, applications, virtualization, and operating system), and will resolve any issues related to software failure or downtime. You, the customer, are responsible for protecting your data against loss or damage caused by human error, programmatic error, or threat actors. <\/p>\n Additionally, while some SaaS applications offer limited backup and recovery services, organizations shouldn\u2019t rely solely on these as they often only store data for a limited amount of time. Microsoft 365, for example, only stores data for an average of 60-90 days; it\u2019s likely because of this that only 15% <\/a>of the 74% of organizations relying on Microsoft 365 for backup could recover 100% of their data following a data loss incident.<\/p>\n Best practices for backup and recovery state that you should create at least three copies of your data, store them on at least two different storage media, and store at least one copy off-site. This is called the \u201c3-2-1\u201d backup rule. Having at least three copies of your data ensures that you can restore your data, even if both the original and one of the backup copies is destroyed. It is worth bearing this in mind as 97% of modern ransomware incidents<\/a> attempt to infect backup repositories as well as primary systems. Storing your backups on two different media types (e.g., in your on-prem data center and in the cloud) ensures that no single point of failure can destroy all your backup copies. By storing one copy off-site, you can ensure that a natural disaster or other catastrophic physical event doesn\u2019t destroy all copies of your data. <\/p>\n Unfortunately, only 15% of IT managers and 12% of IT users<\/a> are following these best practices, with many failing to store their backups both locally and in a cloud storage facility. Over the past four years, the use of cloud backup has increased from 28% in 2019 to 54% in 2022, but the use of local backups has been in rapid decline\u2014from 62% in 2019 to just 33% in 2022.<\/p>\n This trend is in line with global spending for on-prem vs. cloud infrastructure. Traditionally, organizations spent far more on physical data centers than on cloud infrastructure. However, this has changed in recent years. In 2021, spending on data center hardware and software reached $98.5 billion<\/a>\u2014a figure that is little over half of the record-breaking total cloud infrastructure spend at $178 billion. <\/p>\n But even for smaller organizations with reduced storage needs (and limited budgets), it\u2019s a good idea to invest in a hybrid backup model that creates both cloud and local backups, not only for increased security but also to minimize the cost of a data breach. According to recent research<\/a>, data breaches cost 26% less on average for organizations using a hybrid cloud data storage model, compared to a public cloud environment. <\/p>\n Having robust, secure backups in place is the only way to fully recover from a data loss incident such as a natural disaster, accidental deletion, or a ransomware attack. Some organizations are misled to believe that, in the case of ransomware, it\u2019s easier to just pay the ransom than to spend time and money creating and restoring backups. However, it\u2019s important you remember that you\u2019re dealing with a criminal, after all, so paying the ransom does not guarantee the safe return of your data. In fact, only around 8% of ransomware victims<\/a> that pay the ransom recover all their data, and the average ransomware victim loses around 35% of their data. Additionally, paying the ransom doesn\u2019t ensure that all traces of malware are removed from your systems, leaving you vulnerable to a second attack; it could also paint you as an easy target to other ransomware gangs. <\/p>\n However, as with any cybersecurity solution, backup and recovery solutions must be correctly configured and regularly tested to ensure their effectiveness. On average<\/a>, only 57% of backups are successful and 61% of restores are successful. To maximize the rate of success, we recommend that organizations regularly test their cloud backup solution\u2019s ability to create backups, and its ability to carry out data restoration at multiple levels (e.g., single file restores and full system recovery). <\/p>\n Data breaches can have multiple simultaneous negative impacts on an organization, including operational downtime, reputational damage, and financial loss suffered during the recovery, as well as through compliance fines and legal fees. <\/p>\n The average cost of a data breach<\/a> is 3.86 million US dollars. However, breaches that take place in a hybrid cloud environment cost far less on average than private cloud environments ($4.24 million USD) or public cloud environments ($5.02 million USD). So, following the best practice of utilizing a hybrid cloud storage model for your backups can help reduce the cost of a breach, should you suffer one. It can also help minimize the breach lifecycle, meaning that you could get back on your feet more quickly than were you to adopt a solely public or private cloud model. <\/p>\n And considering that 96% of IT managers and decision-makers<\/a> have experienced at least one instance of operational downtime in the past three years\u2014with many of them experiencing multiple outages\u2014 minimizing downtime should be near the top of all IT managers\u2019 business continuity and disaster recovery plans. <\/p>\n The cloud backup market has been increasing steadily in recent years. Thanks to the increase in cloud adoption globally, there is a need for agility and innovation within the cloud backup market. As such, the cloud backup market is rapidly expanding. In 2017, the market size<\/a> stood at $1.2 billion USD; today, it stands at $4.5 billion USD, and it\u2019s expected to grow<\/a> to $13.85 billion by 2028. This gives it a compound annual growth rate of 24.84%. <\/p>\n We are producing more data today than ever before so, within that market growth, we can expect cloud backup providers to focus on developing and improving specific features to support the increasing demand for low data backup and storage. These include automated backups, file-level recovery, point-in-time restore, and encrypted cloud storage.<\/p>\n As more organizations migrate to the cloud or expand their use of cloud services and applications, cloud data will become an increasingly attractive target for cybercriminals. As such, it\u2019s more important than ever before that organizations invest in a secure, robust backup and recovery tool to help them get back on their feet in the event of a data loss incident. <\/p>\n The best backup and recovery tools for cloud data<\/a> offer the following features:<\/p>\n Remember, it\u2019s not enough to just buy a backup and recovery tool and leave it to run itself. It\u2019s important that your backup solution is correctly configured, and operating as you expect it to. Otherwise, you might not know how to recover your data, or the backup interval may be too great to be effective. You should test your backup solution regularly to ensure that it\u2019s working properly. By taking these steps, you increase your chances of a successful recovery a limit the potential downtime in the aftermath of an accident, disaster, or breach.<\/p>\n As well as implementing a backup and recovery solution for your cloud data, it\u2019s important that your organization has a business continuity and disaster recovery plan. This plan should be regularly tested to make sure it works and that it is as effective as it can be.<\/p>\n Failing to test your disaster recovery plan may create a false sense of security and leave you vulnerable to attacks. You may have missed a critical area to backup or find that work practices have changed since you first created the plan that render it unusable or ineffective. It could be that a person responsible for carrying out the post-disaster security audit leaves the organization. <\/p>\n On the other hand, organizations that have an incident response team in place and regularly test their recovery plans save an average of $2.66 million USD<\/a> when they experience a disaster. <\/p>\n Despite this, only 54% of organizations<\/a> currently have a documented disaster recovery plan in place and, of those that do, half of them only test those plans once a year or less frequently, and 7% never test them at all. <\/p>\n For more guidance on creating an effective incident response plan, read our guide on how to respond to a data breach<\/a>. <\/p>\n Want to find out more about how you can protect your cloud data? Check out our buyers\u2019 guides to the top backup and recovery solutions that will help you secure and restore your cloud data:<\/p>\n Almost every organization in the world currently hosts at least some of their IT infrastructure in the cloud. The cloud promises flexibility, scalability, and reduced costs. For all its benefits, if it is not properly configured and secured, cloud environments can be vulnerable to all the cyber threats that traditionally targeted on-premises environments. This could […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-24009","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/healthmedicinet.com\/business\/wp-json\/wp\/v2\/posts\/24009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/healthmedicinet.com\/business\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/healthmedicinet.com\/business\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/healthmedicinet.com\/business\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/healthmedicinet.com\/business\/wp-json\/wp\/v2\/comments?post=24009"}],"version-history":[{"count":0,"href":"https:\/\/healthmedicinet.com\/business\/wp-json\/wp\/v2\/posts\/24009\/revisions"}],"wp:attachment":[{"href":"https:\/\/healthmedicinet.com\/business\/wp-json\/wp\/v2\/media?parent=24009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/healthmedicinet.com\/business\/wp-json\/wp\/v2\/categories?post=24009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/healthmedicinet.com\/business\/wp-json\/wp\/v2\/tags?post=24009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}The Frequency Of Cloud Data Breaches<\/h3>\n
How Businesses Are Being Breached<\/h3>\n
Human Error <\/h4>\n
Account Takeover Attacks<\/h4>\n
Ransomware<\/h4>\n
Hard Drive Failure<\/h4>\n
Natural Disaster<\/h4>\n
Current Use Of Backup And Recovery<\/h3>\n
How Frequently Are Businesses Backing Up Their Data?<\/h4>\n
![\"\"](\"https:\/\/expertinsights.com\/insights\/wp-content\/uploads\/2023\/07\/BackupStats-1024x532.png\")
<\/figure>\nWhat Data Is Being Backed Up?<\/h4>\n
Where Are Businesses Storing Their Backups? <\/h4>\n
The Effectiveness Of Cloud Backups<\/h3>\n
The Impact Of A Data Breach<\/h3>\n
Current Cloud Backup Trends<\/h3>\n
How To Protect Your Cloud Data With Backup And Recovery <\/h3>\n
\n
How Else Can You Protect Your Cloud Data?<\/h3>\n
\n