Two-thirds (67%) of third-party energy sector breaches were caused by software and IT vendors.