Shoulder surfing is a person close to you that will look into your screen to read when you input your password, pin code, or other valuable information. Please remember that today’s CCTV is getting better in terms of quality and zoom. There is also a chance that shoulder surfing can originate from there.
It is very seldom that you would find yourself in such a situation. Remember that you can always be part of the wrong statistics. Additionally, such an attack is fair to use as you need to be close to that person.
Please always take such graph with a pinch of salt.
Such visualizations should make you think, and put things in context rather than show a universal truth.