I don't think these kinds of surveys are (1) accurate or (2) particularly useful, but the gold standard for this kind of stuff is the Verizon DBIR:<p><a href="https://enterprise.verizon.com/resources/reports/dbir/" rel="nofollow">https://enterprise.verizon.com/resources/reports/dbir/</a>