Data theft accounted for 37% of cyber-attacks, while 33% had an extortion component and 19% involved ransomware or destructive activity.