ITRC just published their data breach statistics for 2008, and it ain’t pretty. There were 656 reported breaches, up by 210 or 47% from 2007. That’s right, the problem is getting worse, not better. Forms of breaches included attacks, notebook thefts, and employee-related data loss.
Insider theft was blamed for 15.7% of breaches. Anyone who tells you that all you need is a firewall to prevent external theft is, simply put, an ignorant security practitioner.