While organizations may take weeks to discover a data breach, in 93% of cases hackers gained access within minutes. Attackers primary motivation is money and will steal anything that can be converted to cash. They often exploit known vulnerabilities and social engineering remains effective.
Verizon defines 9 patterns of hacks and how to prevent them: miscellaneous errors, insider and privilege misuse, physical theft and loss, denial of service (DoS), crimeware, web app attacks, point of sale intrusions, cyber-espionage, and payment card skimmers.
Read more at http://www.verizonenterprise.com/resources/reports/rp_dbir-2016-executive-summary_xg_en.pdf