The internet has become the catalyst to an ever-growing global economy. At its foundation, it was designed for connectivity, but not security. This in turn means that organizations that have moved to a digital business model are open to the risk of data being stolen. Throughout the years, approaches such as intrusion detection systems, anti-virus programs, and traditional incident response methodologies have attempted to fill the security gap. However, these approaches by themselves have had limited success as new and ever more sophisticated threats have been found ways around those defense systems. Findings from the 2021 Data Breach Investigations Report show that in 2020, data continued to be lost or stolen, a pattern that is unlikely to change anytime soon. These threat actors may be internal (for loss) or external (for theft).