BlueVoyant’s 2024 survey found that 81% of respondents reported negative impacts from supply-chain breaches over the preceding 12 months. That is a respondent-reported impact figure—not proof that 81% of all organizations had a breach independently confirmed. BlueVoyant’s separate 2025 survey later reported 97%, making the 81% a dated result rather than the latest figure.
What the 81% figure means
In its November 4, 2024 announcement, BlueVoyant said 81% of surveyed organizations reported negative impacts from supply-chain breaches during the previous 12 months, compared with 94% in its 2023 survey. The phrase “reported negative impacts” matters: this is a survey response, not an independently verified count of organizations breached.
The survey was conducted in July 2024 with Opinion Matters and included more than 2,100 industry leaders. Respondents represented sectors including business services, financial services, healthcare, manufacturing, utilities, energy and defense, across the US, Canada, Europe, APAC and other regions. BlueVoyant’s public summary does not provide enough methodological detail to establish how representative the sample is or validate each reported incident. BlueVoyant’s 2024 survey announcement
Is 81% still the latest result?
No. BlueVoyant’s November 20, 2025 announcement reported that 97% of organizations surveyed said they had experienced negative impacts from supply-chain breaches over the prior 12 months. It also said 95% had increased third-party risk management (TPRM) budgets and identified tool integration as a leading operational challenge. These are results from a later, separate annual survey. They should not be treated as a controlled year-over-year trend without comparing the full methods and respondent comparability. BlueVoyant’s 2025 survey announcement
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →#1 Best Overall
| Survey result | What was reported | How to interpret it |
|---|---|---|
| BlueVoyant 2023, as cited in its 2024 comparison | 94% reported negative impacts from supply-chain breaches | Earlier annual survey result; the comparison does not by itself establish a like-for-like trend. |
| BlueVoyant 2024 | 81% reported negative impacts over the previous 12 months | Survey fielded in July 2024; more than 2,100 industry leaders. |
| BlueVoyant 2025 | 97% reported negative impacts over the prior 12 months | Later, distinct survey result; do not assume unchanged methodology or respondent mix. |
How a separate study adds context
A Cyentia Institute and SecurityScorecard analysis examined 331 confirmed breaches and Global 2000 third-party ecosystems. Its publication page says 99% of the analyzed firms were directly connected to at least one vendor with a confirmed breach, and that median financial losses in multi-party incidents were 17 times higher than in traditional single-firm incidents. Those findings concern a different study population and method; they do not verify or explain BlueVoyant’s survey percentages. The page does not state a publication year. Cyentia Institute study summary
Why third-party risk is an operational issue
Organizations rely on suppliers, service providers and other partners that may have access to systems or data. A weakness or incident at one organization can therefore matter to others connected to it. BlueVoyant’s 2024 announcement quoted its global head of Supply Chain Defense, Joel Molinoff, saying that organizations’ focus was shifting from awareness and program adoption toward the day-to-day work of managing an effective TPRM program.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
That operational work includes identifying suppliers, assessing and monitoring their risks, assigning responsibility for remediation, and connecting supplier findings to enterprise risk workflows. BlueVoyant’s 2025 announcement’s emphasis on tool integration reinforces that having a program or budget alone does not resolve the coordination work.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What organizations can take from the findings
The survey figures indicate that supply-chain incidents are a reported concern among the respondents, but they do not show that every organization faces the same level of exposure or that a particular tool will reduce it. When evaluating a TPRM process or supplier cyber risk monitoring software, organizations can focus on whether it supports measurable risk reduction rather than simply documenting compliance.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Supplier visibility: Can the organization identify relevant suppliers and see which ones have access to systems, data or critical services?
- Monitoring coverage: Does ongoing monitoring reach the suppliers and risks that matter, rather than relying only on a one-time assessment?
- Remediation ownership: Are findings assigned to a responsible team, with a clear path to follow-up and closure?
- Workflow integration: Can supplier-risk findings move into existing enterprise risk processes without creating disconnected alerts or duplicate work?
- Evidence of impact: Does the program track whether risks are addressed, not just whether questionnaires or checks were completed?
The available findings do not establish which vendor product performs best. The useful comparison is how well an approach fits the organization’s supplier landscape, remediation process and risk workflows.
Quick Recap
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
Rank #4
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
