Verizon publishes the DBIR every year. The full name is the Verizon Data Breach Investigation Report.