The main sources of those breaches?
| 2008 | 2007 | |
| Insider Theft (stolen by someone inside company) | 16.50% | 6.00% |
| Data on the Move (laptop, thumb drive, PDA, etc.) | 20.30% | 9.70% |
| Subcontractor (stolen or lost by second party) | 20.30% | 27.80% |
| Hacking (stolen by someone outside of company) | 13.40% | 14.10% |
| Accidental Exposure (inadvertent Internet/Web posting) | 14.10% | 20.20% |
Source: Identity Theft Center
The number of course only includes those that were publicly reported. Many organizations still keep these incidents from the public.