
Lies, Damn Lies and Statistics
This is not really a fair study. The only industry that were required to report breaches to the ICO untill 25th of May 2018 was the public sector.
if you look at the figures since then, when everone is required, then the stats look a lot different.