When attackers steal data, which type of data is stolen most often, and which type tends to be the most costly to lose?

Personally Identifiable Information (PII) — data that identifies a person, like customer or employee records — is stolen most often, while Intellectual Property (IP) tends to be the most costly per record to lose.

PII (names, identifiers, contact and account details) is everywhere and easy to monetize, so it is the most frequently stolen. IP — trade secrets, designs, source code — is rarer to lose but more damaging per record because it can erase a company's competitive advantage permanently, with no "reset password" remedy. Also notable from the same research: a majority of organizations (around 63%) refused to pay ransomware attackers, reflecting a hard-line shift in incident response.