“Over 17% of the external attacks resulted in losses over $1,000,000.”