Security Assessment Tool for Construction




Get your free security rating
  • The Construction industry generates great economic growth, making it a target for financially motivated attacks, typically carried out by organized criminal groups. Most of these attacks were opportunistic (75%), meaning that the actors who perpetrated them had the tools and know-how to find and exploit security vulnerabilities.

  • Total incidents


    The number of security incidents (Nov 2018 to Oct 2019) analyzed in this sector in the 2020 DBIR.

  • Top three patterns

    Everything Else 

    Web Applications 


    The top trends that emerged from this sector’s data (Nov 2018 to Oct 2019) in the 2020 DBIR.

  • Threat actors 

    95% External 

    95 percent

    5% Internal 

    5 percent

  • Actor motives 

    84% - 100% Financial 

    85 percent range

    0% - 16% Grudge 

    15 percent range


  • The target is everyone

    Social engineering tactics were a common approach, with attackers and security researchers having above average success tricking employees into entering credentials on a spoofed web page, downloading malware or wiring cash. That’s why it’s important for your staff to understand that they’re targets, and to report anything suspicious to your security team right away.

  • Multi-factor authentication is key

    For Web Application attacks, the use of stolen credentials was most common. These might be obtained from a phishing attack or from earlier breaches. Employees reusing their credentials for multiple professional and personal accounts increases the risk for organizations when those credentials are stolen. Multi-factor authentication can reduce your vulnerability.

  • See the latest trends in cybersecurity.


    Explore the results of the 2020 Data Breach Investigations Report (DBIR) and see what patterns emerged across the thousands of security incidents, from companies both big and small.


    See an overview of all trends

Read specific insights about your industry

  • 2020 dbir cover
  • Understanding the threats can help manage risk effectively

    The threats are real, the attackers motivated. But something stands between them and your organizations data: you and your security teams, with the insight, perspective, and tools to take action. You'll find that all right here.

    Download the report