1. The most damaging SQL injection attack stole 1.5 billion records in just 4 hours
2. A single character in a SQL injection attack once caused $1.2 billion in stock market losses
3. Some SQL injection vulnerabilities have remained exploitable for over 15 years in legacy systems