Breakdown of Cases in the Insider Threat Database

At the time of this writing, we have more than 700 cases in our insider threat database. Most of the work detailed in this book is based on the intentional insider crimes that occurred within the United States. The chart in Figure 1-1 depicts the breakdown of those cases by type of crime, including national security espionage crimes. Cases of industrial espionage are included but as part of the theft of IP category.

Figure 1-1 Breakdown of intentional insider crimes in the United States (including national security espionage)

Note the Miscellaneous (labeled “Misc.”) bar in the graph. These miscellaneous cases either don’t fit into the other categories or are fairly new and we have not been able to gather much information on them. We like to track cases in our database as soon as we become aware of them, but categorize them under Miscellaneous until we have sufficient information to include them in our analysis.