If this one doesn't give you pause about the businesses you deal with, nothing will.
Some security researchers take issue with the study, saying the numbers are simply wrong. No one disagrees with the basic conclusion, though. Major security incidents are the norm, not the exception.
The survey really is a little goofy. It equates spyware infections with genuine intrusions and several other assumptions are equally strange. I suspect this was done to simplify the form in order to not burden those responding unduly.
The point is that there is a lot more of this sort of thing going on than was generally acknowledged.