The expert named the industries that are frequently exposed to data leaks

The largest number (86%) of leaks are databases about users of web resources, in some cases also about the organization's customers and their orders, said the head of BI.ZONE Threat Intelligence Oleg Skulkin. He told Izvestia on May 30 which areas are at special risk.

In most cases, attackers use vulnerabilities in publicly accessible web applications to steal data without moving deeper into the Network. This allows criminals to collect a large amount of information relatively quickly and simply.

"Trade is the absolute leader in the number of leaks. It accounts for 40% of all cases. Almost half of them are related to online retail sales platforms — marketplaces and online stores. Why marketplaces? In most cases, attackers exploit vulnerabilities in publicly available web applications without moving deeper into the Network," the expert noted.

Knowledge leaked: almost 50 major data leaks have occurred since the beginning of the year

The owners of bots began to massively buy databases with personal information about Russians

He recalled that marketplace applications usually store a lot of personal data and other sensitive information at once: not only full name and date of birth, but also payment and, in some cases, passport data.

"The combination of these two factors makes marketplace applications an ideal target for intruders: attacks on them allow criminals to obtain a lot of valuable data without making much effort," Skulkin added.

The second place in leaks is occupied by the financial industry, which accounts for 7% of the total. According to the expert, the attackers most often stole data from small credit institutions and MFIs. This choice is due to the fact that large banks, as a rule, are very well protected, and it is much easier for attackers to get to the databases of small creditors.

"The third place is shared by education and the entertainment industry. They account for 6% of leaks each. Among educational organizations, online learning platforms are the most susceptible to leaks," Skulkin said.

Earlier, on April 25, it was reported that the number of major leaks since the beginning of the year has already reached about 50. The attackers had at least 21.5 million unique phone numbers and 17 million email addresses in their hands. Data from logistics companies and entertainment services is particularly vulnerable. This information is rapidly being bought up on the black market by the owners of penetration bots, trying to get one or another leak "exclusively".