ImmuniWeb is a Contributor to the 2026 Data Breach Investigations Report (DBIR)

May 21, 2026

For the second year in a row, ImmuniWeb is a contributor to the globally renowned Data Breach Investigations Report (DBIR) by Verizon.

This week in cybersecurity was marked by the long-awaited publication of Verizon’s 2026 Data Breach Investigations Report (DBIR), which is making headlines across the media around the globe.

Leveraging public information from nearly 500 million security tests performed by ImmuniWeb® Community Edition, ImmuniWeb provided actionable data for the report regarding web, mobile, and cloud security and privacy.

Key findings from the report include:

• Vulnerability Exploitation: 31% of breaches now start with software vulnerabilities, overtaking stolen passwords as the primary entry point for attackers. Hackers are shifting their focus from manipulating people to exploiting systems.
• Ransomware Trends: 48% of all breaches now involve ransomware, though payouts are shrinking. Even as ransom demands decrease, businesses are increasingly choosing not to pay.
• AI-Powered Attacks: 15 different attack techniques are now being augmented by generative AI. Threat actors leverage AI to accelerate every stage of an attack—from identifying security gaps to writing malware.
• Mobile Targets: A 40% higher click rate makes mobile devices the new preferred target. As users become better at spotting traditional phishing emails, attackers are shifting focus to mobile devices. Whether through fake text messages or scam calls, individuals are significantly more likely to fall for a mobile-centric threat than a traditional email.

Dr. Ilia Kolochenko, Chief Architect & CEO at ImmuniWeb, states: “At ImmuniWeb, we are delighted to successfully continue our collaboration with the amazing Verizon DBIR Team. Their research is the de facto industry standard for understanding the scale, impact, and trends of data breaches and security incidents globally.

This year's edition of the report highlights many critical challenges for cybersecurity leaders and defenders. It reveals a complex combination of traditional cyberattacks and human error, intertwined with novel, AI-driven hacking techniques.

In 2026, organizations have to navigate a rapidly growing number of sophisticated cyber threats to prevent data breaches and avoid regulatory sanctions. At ImmuniWeb, we are committed to continuously improving our products to ensure our customers and partners stay ahead of emerging cyber threats.”

The DBIR is an annual report on cybersecurity analyzing real-world data breaches – how they happen, who’s behind them, and how businesses can stay protected. Using global data, it provides key insights to help companies stay ahead of cyber threats. It acts as a vital cybersecurity risk management report for businesses of all sizes.

What’s next:

• Request a free product demo or pricing
• Register for our upcoming webinars and product trainings
• Read our Cybercrime Investigations weekly blog
• Follow us on LinkedIn, X, Telegram and WhatsApp
• Subscribe to our Newsletter
• Join our Partner Program