Over half of organizations have experienced a third-party data breach
(TechRadar)

Target organizations rarely fully assess the security practices of third parties before giving them access to sensitive data.