Sixty-five percent of French security decision-makers at firms that have experienced at least one breach in the past 12 months reported cumulative breach costs of $1 million to $5 million, compared to 55% in Europe. Forty-four percent of those in the UK reported total costs in this range, with 18% saying cumulative costs were more than $5 million. Sixteen percent of European companies that had payment or credit card data stolen as part of a breach had cumulative costs higher than $5 million, compared to a 12% average. Software supply chain breaches and stolen credentials are the most common external attack vectors. Enhanced application security and IAM capabilities can manage this risk.