[GabeTheEngineer]

I'd recommend taking a look at the Appendix E: Methodology. It's a little long at three pages, but hopefully answers your questions. If not, hit up the email address or twitter account on page 47 and we'll answer them.

Gabe Co-Author

[zinssmeister]

Gabe, thanks for that. Just checked the Appendix E section you mentioned, instantly a fan of what I saw there. Glad you have filters in place rather than just taking any breach report into the data set.