Most Cyberbreaches Stem from Poor Hygiene, Not Sophisticated Attacks

Security expert Serguey Shinder argues that the majority of real-world data breaches are caused by basic oversights rather than advanced hacking techniques. Common culprits include reused passwords, unpatched servers, misconfigured storage buckets, and employees falling for phishing emails. Shinder notes that organizations often prioritize flashy security tools over unglamorous but essential practices like multi-factor authentication, asset tracking, and timely access revocation. He warns that attackers rarely need to be sophisticated when fundamental security hygiene is neglected. According to Shinder, closing obvious gaps consistently is what genuinely prevents breaches, not chasing complex threats.