Ironic..grocery store near me told me their supplier had a data breach. It affected most major retailers.. Whole Food, fresh market, sprouts, target etc..
Lots of breaches each and every day. Made worse now with AI tools. (I manage 350 firewalls for a global corp) so yes, battling this 24x7.
We had a breach (last year) where the FW wasnt compromised, but hackers got in via a Windows Admins credentials they got from the dark-web.
They simply logged in as him, and ran tools that locked most of the VM's in the company (ransomware). With his admin level of access, they had free reign.
Was an insane 4-6 months of rebuilding, and totally getting them out of our Network.
(Of course the domain controllers being locked was the worse thing) along with data extraction, exporting all user accounts, all that fun stuff.
So a simple thing like a users password getting out, can wreak lots of havoc. Human error and social engineering are the worst culprits.
Then there are cases like other companies being hacked, but there are IPSEC tunnels back to us with limited access. That access can aslo be exploited to get into our network from theirs.
So yes, dangerous out there.
This site should tighten up a bit. (Dont post touchdown pics, etc). Your IP (if not using a vpn) is a path to your front door, with you showing the felony you committed,
and a pic of the goods inside your place.
VPN's arent totally safe either, those companies have been raided, with warrants to turn over logs, records, users, etc...
Be careful.. Be paranoid...