2015 was a particular bad year, but what are your predictions for 2016? More of the same, or an improvement?
Internet criminals are becoming more refined in their attack methods, and there does not seem to be a preference for particular security vulnerabilities. With so many different platforms collecting sensitive data, such as addresses and verification documents, there is a treasure trove of data which can be sold on the underground markets.
http://bitcoinist.net/500-million-records-stolen-in-2015-due-to-security-vulnerabilities/