Human error was the number one cause of data security incidents according to a new report released by the Privacy and Data Protection Team at US law firm BakerHostetler. In the incidents that the firm worked on last year, employee negligence was responsible 36% of the time. That was followed by theft by outsiders (22%), theft by insiders (16%), malware (16%) and phishing attacks (14%).