Breaches caused by external attackers posing as insiders are the most financially damaging, Ponemon Institute survey finds.