|Most security breaches (including ransomware events) are insider attacks I'm interested in this suggestion, do you have any data ? The breaches that I recall

|Most security breaches (including ransomware events) are insider attacks I'm interested in this suggestion, do you have any data ? The breaches that I recall most vividly (and I appreciate that confirmation bias is at play here) involve outsiders accessing cloud based data stores (almost always S3 because of market dominance) the access rights of which have been inadvertently set up to allow public access. I can recall a case like the above which was then exploited by a disgruntled insider but mostly, it seems to me, it's outsiders. Would be interested to see some numbers although given a lot of ransom events are, I assume, never made public it's probably difficult to get anything definitive ?