The answers relate to the last 12-month period. Since GDPR came into force, firms have reported they suffer breaches more often