- Third Party Cyber Security Risks are a growing threat, reporting allegations
- More than one -third of all violations in 2024 were related to third party
- Retail and hospitality were most affected
Third -party security issues are probably the biggest threat your business is facing, new research has claimed.
The new 2025 Global Third -Party Violation Report from SecurityScorecard analyzed 1,000 violations across different industries and regions and concluded that more than a third (35.5%) of all violations in 2024 were related to third parties.
To make things even worse, this figure is “probably conservative,” the company said due to sub -reporting and misleading.
Retail and hospitality
The report also states that there has been a significant diversification of attack surfaces in 2025 compared to the previous year, as less than half (46.75%) of third -party violations involved technology products and services (down 75% the year before).
Looking at specific industries, SecurityScorecard retail and hospitality with the highest third-party violation rate (52.4%) found, followed by the technology sector (47.3%) and the energy and supply industry (46.7%).
Although it had an average of 32.2%, the health industry suffered the most third -party fractures in absolute numbers (78).
Geographically, Singapore managed worst (71.4%), followed by the Netherlands (70.4%) and Japan (60%).
Securityscorecard also warned about the dangers of ransomware through third -party risk. More than two out of five (41.4%) of all ransomware -attacks now starts through third parties, with the notorious CL0P group leading the charge.
“Threateners prioritize third-party access for its scalability. Our research shows ransomware groups and state-sponsored attackers who are increasingly utilizing the supply chains as entrance points. To stay ahead of these threats, security leaders must move from periodic supplier reviews to real-time monitoring to contain these risks before they escalate,” Sherstobitoff, SVP of Security Intelligence.
