Implementing multi-factor authentication, supplier risk-management frameworks, and staff security training could help to reduce data breaches.