IBM | IBM X-Force 2012 mid-year trend and risk report (PDF)
From Section I - Threats:
“As a security research organization, IBM X-Force has traditionally viewed security breaches with a technical focus. However, we have modified our view of attacks and breaches over time to encompass a greater business context. The overall breach trend continues into 2012, as several major high profile businesses have had to deal with the fallout of leaked passwords and other personal data. The healthcare industry in particular seems to be hit hard. While security products and technology could have mitigated many of these unfortunate events, we are seeing more than ever how systems interconnectedness, poor policy enforcement, and human error, is far more influential than any single security vulnerability.”
(Source: security.nl)