Hugo Cornwall's excellent Datacrime (the grown up and long trousers version of The Hackers Handbook)estimated that over 90% of all intrustions were internal.

I'm suprised that the number's gone down so much in the last 20 years or so...