300 Cyber Security Statistics, Facts & Figures

Cybersecurity is evolving rapidly as cyberattacks become increasingly sophisticated, and organizations need to stay informed about the latest trends and threats. Keepnet has compiled 300 key cybersecurity statistics, highlighting recent data on emerging threats, advanced attack techniques, and evolving security trends, aligning with broader cybercrime statistics reported globally.

This blog post will help businesses strengthen their cybersecurity strategies by exploring the most up-to-date information and identifying key areas for improvement based on the latest cyber attack statistics and trends for 2025.

Latest Cyber Security Statistics (2025-2026)

• In 2025, the FBI IC3 reported total losses of $20.877 billion, with business email compromise (BEC) losses of $3.05 billion. (Source: FBI IC3 2025 Internet Crime Report)
• Phishing and spoofing were the most reported crime type in 2025, with 191,561 complaints and $215.8 million in losses. (Source: FBI IC3 2025 Internet Crime Report)
• APWG recorded roughly 3.8 million phishing attacks across full-year 2025. (Source: APWG Phishing Activity Trends Report, Q4 2025)
• 43% of UK businesses experienced a breach or attack in the past year, 38% of them involving phishing, and phishing was the most disruptive attack for 69% of affected businesses. (Source: UK DCBS Cyber Security Breaches Survey 2025/26)
• Exploited vulnerabilities were the number one initial access vector at 31%. (Source: Verizon 2026 DBIR, p. 15)
• Stolen credentials as initial access fell to 13%, down from 22%. (Source: Verizon 2026 DBIR, p. 15)
• The human element appeared in 62% of breaches, and phishing was the initial access in 16%. (Source: Verizon 2026 DBIR, p. 12)
• Ransomware was present in 48% of breaches. (Source: Verizon 2026 DBIR, p. 29)
• Non-corporate GenAI (shadow AI) use on corporate devices reached 67%. (Source: Verizon 2026 DBIR, p. 12)
• AI-automated phishing achieved a 54% click-through rate versus 12% for standard phishing (4.5x), based on the Microsoft Incident Response and Defender dataset, not a global breach census. (Source: Microsoft Digital Defense Report 2025)
• 35% of organizations experienced a deepfake incident, and 84% of leaders observed more advanced phishing. (Source: Gartner)

Cybercrime Facts and Forecasts

Cybercrime continues to rise at an unprecedented pace, reshaping the global threat landscape for individuals, businesses, and governments alike.

Beyond financial impact, the sheer volume of attacks highlights how widespread and accessible cybercrime has become.

These cybercrime statistics underscore the urgent need for stronger defenses, proactive awareness, and global collaboration to mitigate evolving threats.

• Cybercrime costs are expected to escalate worldwide to almost $14 trillion by 2028. (Source: Statista)
• Phishing and spoofing was the most reported cyber crime in the US in 2025, with 191,561 complaints to IC3 (FBI IC3, Internet Crime Report 2025). (Source: IC3).
• Phishing/spoofing was the most reported cyber crime to the IC3 in both 2024 (193,193 complaints) and 2025 (191,561 complaints). (Source: FBI IC3 2024 and 2025 Internet Crime Reports)

• UK businesses who were victims of cyber crime experienced an average of 30 cyber crimes of any kind in the last 12 months. (Source: GOV.UK)
• In the UK Government's study, 18% of micro businesses, 25% of small businesses, 43% of medium businesses, and 52% of large businesses were likely to experience cyber crime. (Source: GOV.UK)
• Three-quarters of consumers have had their personal information lost or stolen in some form of cybercrime. (Source: III)
• Russia tops the list of the most significant sources of cybercrime at a national level, followed by Ukraine, China, the USA, Nigeria, and Romania in the first ever ‘World Cybercrime Index’ compiled in 2024. (Source: University of Oxford)
• Russian-speaking cybercriminals dominate the global ransomware industry, with an estimated 75% of ransomware revenue going to actors linked to the Russian-language underground. (Source: Global Initiative)
• Cybercrime up 600% Due to COVID-19 Pandemic. (Source: PurpleSec)
• The global annual cost of cybercrime is estimated to be $6 trillion per year. (Source: PurpleSec)
• Cybercrime cost makes up a value worth 1% of the Global GDP. (Source: PurpleSec)
• 71.1 million people fall victim to cyber crimes yearly. (Source: PurpleSec)
• Individuals lose $4,476 USD on average. (Source: PurpleSec)
• Individuals lose $318 billion to cybercrime. (Source: PurpleSec)
• Individuals of phishing scams lost $225 on average. (Source: PurpleSec)
• The average (mean) annual cost of cyber crime for businesses is estimated at approximately £1,120 per victim (this excludes crimes where the cost is unknown).

Cyber Security Statistics on the Cost of Cybercrime

The financial toll of cybercrime continues to surge, placing immense strain on organizations of all sizes.

From soaring data breach costs to skyrocketing ransomware payments, the numbers reveal a trend of relentless escalation year after year.

With the U.S. and other regions paying significantly above the global average, businesses face unprecedented risks that go far beyond technical disruptions.

These cybersecurity statistics highlight not only the direct monetary losses but also the long-term reputational damage and operational setbacks that make cybercrime one of the most pressing global challenges today:

• The average cost of a data breach globally is growing to around $4.88 million, a 10% increase year-on-year. (Source: IBM)
• The industrial sector is experiencing the highest increase in data breach costs, rising by $830,000 on average year-on-year. (Source: SecurityIntelligence)
• Data breach costs are projected to be the highest in the U.S., followed by the Middle East, Benelux, and Germany. (Source: Statista)
• All four territories experience costs higher than the global average of $4.88 million, with the U.S. paying almost double this amount. (Source: Statista)
• Ransomware costs victims an average of $1.85 million per incident, with attacks rising by 13% over a five-year period. (Source: Astra)
• The average cost of a data breach now stands at $4.88 million, showing a 10% rise compared to the previous year. (Source: IBM)
• A data breach can cost a company an average of $1.3 million in lost business. (Source: IBM)
• In the US, a data breach costs an average of $9.44M. (Source: GetAstra)
• On average, a malware attack costs a company over $2.5 million (including the time needed to resolve the attack). (Source: PurpleSec)
• The average cost of a data breach to small business can range from $120,000 to $1.24 million. (Source: PurpleSec)
• The average cost was $1.07 million higher in breaches where remote work was a factor in causing the breach. (Source: PurpleSec)
• It costs $180 per record with PII that was breached. (Source: PurpleSec)
• When remote work is a factor in causing a data breach, the average cost per breach is $173,074 higher. (Source: IBM)

Cyber Security Statistics on Data Breaches

Data breaches remain one of the most damaging aspects of cybercrime, with both the frequency and impact continuing to escalate globally.

Recent reports show billions of records exposed, millions of files left open to excessive access, and a concerning lack of incident response planning across organizations.

• The ITRC's mid-year 2025 report reveals 1,732 data breaches occurred in the first half of the year, marking an 11% rise from last year. (Source: ITRC)
• The prevalence of cyber breaches and attacks in medium and large businesses remains high (67% medium and 74% large) and was similar to 2024 (70%). (Source: GOV.UK)
• On average, every employee has access to 11 million files. (Source: Varonis)
• 15 percent of companies found 1,000,000+ files open to every employee. (Source: Varonis)
• 17 percent of all sensitive files are accessible to all employees. (Source: Varonis)
• About 60 percent of companies have more than 500 accounts with non-expiring passwords. (Source: Varonis)
• More than 77 percent of organizations do not have an incident response plan. (Source: Cybint)
• The average time to detect a data breach is 118 days. (Source: ThoughtLab)
• 70% of data breaches caused significant or very significant disruptions. (Source: IBM)
• The average time to detect a breach 2024. (Source: Various)
• 82% of breaches involved cloud-based data. (Source: IBM)
• 540 million accounts were affected in the latest Facebook breach. (Source: DataProt)

Cyber Security Statistics on Ransomware

• The share of breaches caused by ransomware grew 41% in the last year. (Source: GetAstra)
• 59% of all organizations were hit by ransomware attacks over the last year. (Source: Sophos)
• Ransomware attacks increasingly target organizations of all sizes, with 47% of organizations with revenue under $10 million reporting attacks over the past year. (Source: Sophos)
• Ransomware attacks surged by 126% in Q1 2025. (Source: Check Point)
• The healthcare sector is the most targeted by ransomware, with 66% of organizations hit in the past year. (Source: Sophos)
• Ransomware on healthcare organizations impact 6 million patient records. (Source: Comparitech)
• Ransomware on healthcare organizations affect an average of 19,000 appointments per attack. (Source: Comparitech)
• Ransomware fraud on hospitals lead to longer stays and delays in procedures. (Source: Comparitech)
• Ransomware victims who pay the ransom are attacked a second time 80% of the time. (Source: Cybereason)
• Ransomware victims who pay the ransom only recover 65% of their data on average. (Source: Sophos)
• Ransomware victims who pay the ransom experience recovery costs that are 10 times higher. (Source: Sophos)
• Ransomware victims that use backups to recover save nearly $1.4 million on average compared to those who pay the ransom. (Source: Sophos)
• Ransomware victims that use backups to recover are able to restore data in a week or less 71% of the time. (Source: Sophos)
• Ransomware victims that pay the ransom are able to restore data in a week or less 57% of the time. (Source: Sophos)
• Ransomware attacks on lower education institutions have the lowest recovery rate at 63%. (Source: Sophos)
• Ransomware attacks on state and local governments have the highest recovery rate at 79%. (Source: Sophos)
• Ransomware attacks on healthcare organizations have a recovery rate of 67%. (Source: Sophos)
• Ransomware attacks on financial services organizations have a recovery rate of 75%. (Source: Sophos)
• 72% of GCO survey respondents reported a rise in cyber risks, with ransomware remaining a top concern. (Source: Global Cybersecurity Outlook 2025)
• 45% of respondents rank ransomware as a top organizational cyber risk in the 2025 survey. (Source: Global Cybersecurity Outlook 2025)

Cyber Security Statistics on Vulnerability and Exploit

Cybersecurity statistics 2025 highlight a sharp rise in vulnerabilities and exploits, with daily CVE disclosures reaching record-breaking levels.

• In the first half of 2025, CVE reports have continued to rise, showing this isn’t just a short-term trend.
• Daily Vulnerability Disclosures: By late 2024, an average of 115 CVEs were disclosed daily, a testament to the increasing complexity of modern cyber threats. Expect these numbers to rise further in 2025. (Source: GitHub)
• With 25% of breaches linked to stolen credentials and application vulnerabilities, the importance of securing applications becomes increasingly critical in a digital-first world. (Source: Verizon)
• More than 99% of technologists acknowledge that production applications contain at least four vulnerabilities. (Source: Contrast Security)
• Browser exploits ranked second, accounting for nearly 12% of attacks, while Google’s Android was exploited in about 6% of the detected incidents during this period. (Source: Statista)
• Fortra’s reactive stance allowed hackers to exploit a zero-day vulnerability, affecting over 130 companies. (Source: GetAstra)
• Prolonged Exploitation Windows: Zero-day vulnerabilities are not only exploited immediately after discovery but remain active threats for up to 2 years, largely due to delayed patching. (Source: SC Magazine)
• The 2025 DBIR report found that vulnerability exploitation was the initial access method in 20% of breaches. (Source: Verizon)

Cyber Attack Statistics 2026

Attackers moved faster in 2025 and relied less on malware, according to CrowdStrike's 2026 Global Threat Report.

The average eCrime breakout time fell to 29 minutes in 2025, down from 98 minutes in 2021. (Source: CrowdStrike, 2026 Global Threat Report, p. 11)

The fastest observed eCrime breakout time in 2025 was 27 seconds. (Source: CrowdStrike, 2026 Global Threat Report, p. 2)

82% of detections were malware-free in 2025, up from 51% in 2020. (Source: CrowdStrike, 2026 Global Threat Report, p. 11)

Attacks by AI-enabled adversaries increased 89% in 2025 compared with the prior year. (Source: CrowdStrike, 2026 Global Threat Report, p. 15)

Fake CAPTCHA lure incidents rose 563% in 2025 compared with 2024. (Source: CrowdStrike, 2026 Global Threat Report, p. 12)

Cloud-conscious intrusions rose 37% in 2025, and valid account abuse accounted for 35% of cloud incidents. (Source: CrowdStrike, 2026 Global Threat Report, p. 3)

Zero-day vulnerabilities exploited before public disclosure increased 42% in 2025 compared with the prior year. (Source: CrowdStrike, 2026 Global Threat Report, p. 3)

APWG observed roughly 3.8 million phishing attacks in 2025, with a quarterly peak of 1,130,393 in Q2. (Source: Anti-Phishing Working Group, Phishing Activity Trends Reports, Q2 and Q4 2025)

Exploited vulnerabilities became the most common initial access vector at 31%, up from 20%. (Source: Verizon 2026 Data Breach Investigations Report, p. 15)

Cybersecurity incidents now rank among the leading risks for companies of all sizes, including small, mid-size, and large companies. (Source: Allianz)

Cyber Security Statistics on Industry-Specific Insights

Industry-specific cybersecurity statistics reveal that no sector is immune from the growing wave of digital threats, with healthcare, education, small businesses, and government agencies among the hardest hit.

These scary cybersecurity statistics demonstrate how many cyber attacks happen per day across industries, underscoring the urgent need for stronger defenses and long-term resilience strategies.

• The healthcare sector is experiencing the highest increase in data breach costs. (Source: IBM)
• Annually, hospitals spend 64 percent more on advertising in the two years following a breach. (Source: American Journal of Managed Care)
• Hospitals cyber attack impacts 800 operations. (Source: BBC)
• Over 50% of all cyber attacks are done on SMB’s. (Source: PurpleSec)
• 1 in 10 small businesses suffer a cyberattack each year. (Source: DataProt)
• 60% of small businesses go out of business after being victims of a cyber attack. (Source: DataProt)
• Small business cyber attack statistics 2024. (Source: Various)
• 38% of public-sector respondents report insufficient cyber resilience, compared to 10% of medium-to-large private-sector organizations. (Source: Global Cybersecurity Outlook 2025)
• 49% of public-sector organizations indicate they lack the necessary talent to meet their cybersecurity goals, an increase of 33% from 2024. (Source: Global Cybersecurity Outlook 2025)

Cybersecurity Stats on Spending and Market Trends

Global spending on security continues to surge as organizations face escalating threats and costly breaches.

These scary cybersecurity statistics demonstrate how many cyber attacks happen per day in the world, and why cybersecurity spending is projected to surpass $400 billion by 2030.

• On average, 12% of IT budgets are spent on cybersecurity. (Source: Business)
• 97% of businesses expect to increase their cybersecurity budgets in the next 12 months. (Source: Cisco)
• 78% of small and medium businesses say they will increase investment in cybersecurity in the next 12 months. (Source: AAG IT)
• 51% of organizations plan to increase security investments due to a breach. (Source: IBM)
• 51% of business leaders view cybersecurity as a key business enabler. This compares to 37% who view it as a necessary cost of doing business. (Source: PracticalEcommerce)
• The global cybersecurity market is expected to grow to $266.2 billion by 2027. (Source: MarketsandMarkets)
• The cybersecurity industry has an 8.9% CAGR. (Source: GetAstra)
• Cybersecurity budgets as a percentage of firms’ total revenue jumped 51%, from 0.53% to 0.80%. (Source: ThoughtLab)
• 66% of organizations expect their cybersecurity budget to grow in the coming year. (Source: PWC)
• The average security budget of small businesses is 500$. (Source: DataProt)
• The global security market value is forecast to reach $424.97 billion in 2030. (Source: Fortune Business Insights)
• 93% of organizations expect to increase cybersecurity spending over the next year. (Source: Splunk)

Cyber Security Statistics on Workforce and Skills

Cyber attack statistics by year show that threats are rising faster than talent availability, with U.S. cyber attack statistics confirming that organizations struggle to recruit and retain qualified experts.

These stats reveal not only how many cyber attacks happen per day in the world but also how the shortage of skilled defenders intensifies the impact of each attack.

• The global cybersecurity workforce is estimated to be around 4.7 million people. (Source: ISC2)
• The lowest 10 percent earned less than $61,520, and the highest 10 percent earned more than $165,920. (Source: BLS)
• Typical entry-level education is a bachelor’s degree. (Source: BLS)
• The expected growth rate for tech jobs is nearly twice the national rate for all jobs over the next 10 years. (Source: CyberStates)
• The cyber skills gap has increased by 8% since 2024, with two out of three organizations reporting moderate-to-critical skills gaps, and only 14% of organizations are confident that they have the people and skills they need today. (Source: Global Cybersecurity Outlook 2025)
• The cyber skills gap has widened since 2024, with two in three organizations reporting moderate-to-critical skills gaps, and only 14% of organizations are confident that they have the people and skills required. (Source: Global Cybersecurity Outlook 2025)
• Gartner predicts nearly half of cybersecurity leaders will change jobs by 2025. (Source: Gartner)
• 55% of cybersecurity experts have reported increased stress levels due to heightened cybersecurity threats and challenges. (Source: CFO)
• 82% of chief information security officers (CISOs) would consider becoming a whistleblower if their organization was willfully ignoring security and compliance, thus putting the business at risk. (Source: Splunk)
• 84% of CISOs fear being personally liable for cybersecurity incidents. (Source: Splunk)

Cyber Attacks Statistics on AI and Generative AI

The Cyber Attacks Statistics on AI and Generative AI highlight how adversaries weaponize LLMs, deepfakes, and automation, and how security teams are adapting controls, budgets, and training:

• 97% of companies are reporting GenAI security issues and breaches. (Source: Capgemini)
• 24% of companies believe they can use GenAI technology to make incident response more efficient in the future. (Source: Capgemini)
• 85% of cybersecurity professionals attribute the increase in cyberattacks to the use of generative AI by bad actors. (Source: CFO)
• 46% of security experts believe the integration of generative AI in business operations will increase vulnerability to cyberattacks. (Source: CFO)
• By 2027, 17% of cyberattacks will employ generative AI. (Source: Gartner)
• Concerns about AI in cybersecurity include the potential for increased privacy concerns (39%), undetectable phishing attacks (37%), and a general increase in the volume and velocity of attacks (33%). (Source: CFO)
• Just 15% of stakeholders feel non-AI tools can detect and stop AI-generated threats. (Source: Darktrace)
• 70% of organizations find AI highly effective in detecting threats that were previously undetectable. (Source: Ponemon Institute)
• 35% of CISOs are already using AI for security applications. (Source: Splunk)
• 61% will likely use AI in the next 12 months. (Source: Splunk)
• 66% of organizations expect AI to have the most significant impact on cybersecurity in the year to come, but only 37% report having processes in place to assess the security of AI tools before deployment. (Source: Global Cybersecurity Outlook 2025)
• 47% of organizations cite adversarial advances powered by generative AI (GenAI) as their primary concern, enabling more sophisticated and scalable attacks. (Source: Global Cybersecurity Outlook 2025)
• 66% of respondents believe that AI will affect cybersecurity in the next 12 months, but only 37% have processes in place for safe AI deployment. (Source: Global Cybersecurity Outlook 2025)
• 47% of organizations cite the advance of adversarial capabilities (e.g., phishing, malware development, deepfakes) as their top concern surrounding GenAI. (Source: Global Cybersecurity Outlook 2025)
• 26% of companies reported using AI and machine learning solutions to predict and handle breaches. (Source: ThoughtLab)
• Companies with extensive use of AI and automation security tools cost 2.2 percent less in breach costs. (Source: IBM)
• Security Driven AI had best cost mitigation, saving up to $3.81 million (80% cost difference). (Source: PurpleSec)
• Generative AI will probably be used for cyber activities in 2024. (Source: CrowdStrike)

Cyber Attacks Statistics on Social Engineering

Cybersecurity facts below suggests that phishing and social engineering remain the most common and dangerous forms of cybercrime, with up to 98% of cyberattacks involving some type of manipulation.

These scary cybersecurity statistics demonstrate how many cyber attacks happen per day in the world and reinforce why phishing awareness and training remain critical for businesses of all sizes.

• Up to 98% of cyberattacks – against businesses and otherwise – involve social engineering. (Source: Sprinto)
• 42% of organizations report experiencing phishing and social engineering attacks in 2024. (Source: Global Cybersecurity Outlook 2025)
• 42% of organizations experienced a successful social engineering attack in the past year. (Source: Global Cybersecurity Outlook 2025)

Cyber Security Statistics on Cyber Readiness and Strategies

The Cyber Security Statistics on Cyber Readiness and Strategies show where organizations stand on prevention, detection, and response, including IR maturity,zero-trust adoption, MFA coverage, tabletop frequency, budgets, and skills gaps:

• 72% of business owners are concerned about future cybersecurity risks arising from hybrid or remote work. (Source: Statista)
• 74% of businesses are confident in their ability to detect and respond to cyberattacks in real-time, a high of 81% of C-suite leaders vs. 66% of Front-line managers. (Source: VikingCloud)
• 53% of companies actively train staff on how to minimize internal risks. (Source: Securonix)
• More than 86% adopting zero trust models. (Source: Cisco)
• Up to 60% of companies on supply chains will be using the risk of cybersecurity as a buying consideration when partnering with others. (Source: Gartner)
• Around 76% of security leaders are concerned about cyber threats evolving in sophistication – and 72% believe they are “first adopters” of technology to combat them in the years ahead. (Source: KPMG)
• Only 3% of organizations globally have the “Mature” level of readiness to be resilient against cybersecurity risks. (Source: Cisco)
• 83% of large businesses see security as a significant threat to their business. (Source: IBM)
• 80% of organizations use cybersecurity automation tools. (Source: Security Boulevard)
• 62% of IT leaders do not believe they are effectively securing their cloud resources. (Source: Arctic Wolf)
• 42% of IT leaders said that cloud security gaps were their primary area of concern. (Source: Arctic Wolf)
• 49% of business leaders rated modernization of technology including cyber infrastructure as their top priority over the next 12 months. (Source: PWC)
• Only 4% of organizations are confident in their assurance of security to users of connected devices and related technologies. (Source: World Economic Forum)
• Only 4% of organizations feel confident in their security to “users of connected devices and related technologies are protected against cyberattacks.” (Source: GetAstra)
• 50% of C-suite leaders will have cybersecurity risk-related performance requirements embedded in their contracts by 2026. (Source: Gartner)
• Organizations with a zero-trust approach saw average breach costs $1.76 million less than organizations without. (Source: IBM)
• Zero trust security policies saved $1.76 million per breach. (Source: PurpleSec)
• 41% of cybersecurity executives report using Zero Trust architecture principles. (Source: ThoughtLab)
• 30% of executives said their budgets aren’t sufficient to ensure proper cybersecurity. (Source: ThoughtLab)
• 31% of executives said their main cybersecurity challenge was improper identification of key risks. (Source: ThoughtLab)
• 50% of companies outsource their cybersecurity operations center. (Source: ThoughtLab)
• The most used cybersecurity framework was ISO 27001/27002 at 48% of companies. (Source: ThoughtLab)
• 55% of companies run internal cybersecurity assessments. (Source: ThoughtLab)
• Only 38% of companies say they have made notable improvements after a breach. (Source: ThoughtLab)
• Only 23% of companies say their cybersecurity metrics are well understood by the board and senior executives. (Source: ThoughtLab)
• The top cybersecurity investment is upskilling cybersecurity and IT staff, with 46% of companies reporting this. (Source: ThoughtLab)
• 63% of companies have some form of email security measure. (Source: ThoughtLab)
• Only 29% of companies reported using multi-factor authentication. (Source: ThoughtLab)
• 46% of organizations test cyber incident response time and planning every quarter. (Source: Deloitte)
• 41% of organizations identified hybrid IT situations as their biggest cybersecurity challenge. (Source: Deloitte)
• 46% of companies have identified increased CEO support as a major driver of cybersecurity-aware work culture. (Source: PWC)
• 53% of users haven’t changed their passwords in the last 12 months. (Source: LastPass)
• 57% of users reported having a password written down on a sticky note. (Source: Keeper Security)
• 37% of employees use their employer’s name as a portion of their password. (Source: Keeper Security)
• 44% of users reported recycling passwords across personal and business-related accounts. (Source: Keeper Security)
• 62% of users have shared a password over email or text messages. (Source: Keeper Security)
• 73% of companies in North America use browsers that are out of date. (Source: Statista)
• 61% of respondents’ organizations provided work-issued devices to employees as needed, 65% did not deploy a new antivirus (AV) solution for those same devices. (Source: PurpleSec)
• 44% of respondents’ organizations did not provide cybersecurity training that focused on potential threats of working from home (like ensuring home networks had strong passwords, or devices were not left within reach of non-authorized users). (Source: PurpleSec)

Cyber Security Statistics on Compliance

Cyber security statistics on compliance reveal that regulatory pressures are shaping how organizations allocate their security budgets, with 66% of companies citing mandates as the main driver of spending.

Cyber attack statistics and figures highlight the growing financial impact of non-compliance, with GDPR fines.

See details below:

• 66 percent of companies say that compliance mandates are driving spending. (Source: CSO Online)
• 78 percent of companies expect annual increases in regulatory compliance requirements. (Source: Thomson Reuters)
• For large firms, the cost of compliance can approach $10,000 per employee. (Source: Forbes)
• Meta was fined $1.3 billion for GDPR violations in 2023. (Source: Reuters)
• TikTok was fined $370 million for breaching a number of GDPR rules in 2023. (Source: Forbes)
• Spotify was fined $5.4 million in 2023. (Source: CyberNews)
• Uber was fined €290m in 2024. (Source: Infosecurity Magazine)
• 78% of leaders from private organizations feel that cyber and privacy regulations effectively reduce risk in their organization’s ecosystems. (Source: Global Cybersecurity Outlook 2025)

Cyber Security Statistics on Supply Chain and Third-Party Risks

Cyber security statistics on supply chain suggests that third-party risks are now among the fastest-growing attack vectors, with nearly half of global organizations expected to be impacted by a supply chain attack within the next two years.

Cyber attack statistics by year highlight major incidents like the MOVEit breach, which compromised more than 620 organizations worldwide.

• Up to 60% of companies on supply chains will be using the risk of cybersecurity as a buying consideration when partnering with others. (Source: Gartner)
• The MOVEit Supply Chain Attack compromised more than 620 organizations. (Source: NCSC)
• 45% of global organizations will be impacted by a supply chain attack over the next two years. (Source: Gartner)
• 54% of large organizations identified supply chain challenges as the biggest barrier to achieving cyber resilience. (Source: Global Cybersecurity Outlook 2025)

Cybersecurity Facts on Cyber Insurance

Cybersecurity facts & figures on insurance suggests that the demand for cyber insurance is rising rapidly as businesses face growing financial risks from data breaches, ransomware, and phishing attacks:

• 1 in 3 US companies has purchased data-breach insurance coverage or cyber liability insurance. (Source: DataProt)

Cybersecurity Stats & Trends on Malware and Web Application Threats

Cybersecurity statistics on malware and web application vulnerabilities suggest that these remain among the most exploited attack vectors, with 17% of all cyber attacks targeting insecure applications.

See other cyber security facts & figures below:

• 17% of cyber attacks target vulnerabilities in web applications. (Source: PT Security)
• 98% of web applications are vulnerable to attacks that can result in malware, redirection to malicious websites, and more. (Source: PT Security)
• 72% of vulnerabilities were due to flaws in web application coding. (Source: PT Security)
• Access to Someone’s entire online identity is worth roughly $1,000. (Source: PurpleSec)
• PII goes for roughly $200 per record. (Source: PurpleSec)
• $50 gets you malware + tutorial on how to use it. (Source: PurpleSec)
• A $34 monthly investment could net a criminal $25,000 a month. (Source: PurpleSec).
• Hackers steal $46 million worth of cryptocurrency every month. (Source: PurpleSec)
• Six of the top ten most expensive crypto breaches occurred in 2021. (Source: PurpleSec)

Cyber Security Statistics on Geopolitical and Emerging Risks

Cybersecurity stats on geopolitical and emerging risks in 2025 show that geopolitical tensions are directly shaping how organizations build and adapt their cyber defense strategies.

These cyber attack statistics by year indicate that threats such as cyber espionage, intellectual property theft, and disruption of critical operations are increasingly tied to global conflicts and political instability.

• Nearly 60% of organizations state that geopolitical tensions have affected their cybersecurity strategy. (Source: Global Cybersecurity Outlook 2025)
• 31% of CEOs cite cyber espionage and loss of sensitive information/intellectual property (IP) theft as their top concern, while 45% of cyber leaders are concerned about disruption of operations and business processes due to geopolitical tensions. (Source: Global Cybersecurity Outlook 2025)
• 5% of respondents in Europe and North America lack confidence in their country’s ability to respond to major cyber incidents targeting critical infrastructure, compared to 36% in Africa and 42% in Latin America. (Source: Global Cybersecurity Outlook 2025)
• 60% of organizations reported that their cyber strategies were influenced by geopolitical tensions. (Source: Global Cybersecurity Outlook 2025)

Cyber-Security Statistics on Blockchain and Crypto

Cyber-security facts on blockchain and crypto suggests that technology continues to drive massive economic growth, it also introduces unique security challenges.

See details below:

• Blockchain could add $407 billion in GDP in the USA alone. (Source: PurpleSec)
• The UK stands to achieve a $72 billion boost to the economy, and Germany could see a $95 billion increase. (Source: PurpleSec)
• Blockchain will boost global GDP by $1.76 trillion by 2030. (Source: PurpleSec)
• 51% of attacks, in which hackers acquire more than half of the network’s computational power, are an issue that has plagued many blockchain systems. (Source: PurpleSec)

Cybersecurity Statistics on Managed Detection and Response (MDR) Trends

Managed Detection and Response is becoming one of the fastest-growing areas in the security market, with half of all organizations expected to adopt MDR services by 2025. C

Cyber attack statistics by year below indicates that outsourcing security operations, particularly detection and response, has surged, with more than 90% of companies prioritizing MDR for risk reduction and cost savings.

See details:

• 30% of organizations leveraging Open Systems MDR saw a reduction in overall risk. (Source: PurpleSec)
• Up to 50% cost savings in Cyber security operations. (Source: PurpleSec)
• 60-75%+ attainment on first-to-know and first-to-report threats. (Source: PurpleSec)
• 68% of organizations have experienced one or more endpoint attacks that successfully compromised data and/or their IT infrastructure. (Source: PurpleSec)
• 82% of CISOs have reevaluated their security policies in response to the support needed for work-from-home (WFH) and virtual teams, endpoints often lack needed patches to stay secure or are overloaded with conflicting software agents. (Source: PurpleSec)

Additional Cybersecurity Statistics

Cyber threats continue to evolve in sophistication, with nearly 40% of businesses reporting a breach or attack in the past year.

Check some more cyber security statistics below:

• 39% of businesses reported cyber security breaches or attacks in the last 12 months. (Source: PurpleSec)
• Cloud environment intrusions increased by 75% over the past year. (Source: CrowdStrike)
• Cloud-conscious cases increased by 110% over the past year. (Source: CrowdStrike)
• There has been a 76% increase in victims named on eCrime leak sites. (Source: CrowdStrike)
• New Hires show 44% higher cyber risks. (Source: Keepnet)

Stay Ahead of Cyber Threats with Keepnet Human Risk Management

The human element appeared in 62% of breaches in the Verizon 2026 Data Breach Investigations Report (p. 12). This aligns with current cyberattack statistics, which highlight that human error remains one of the largest vulnerabilities in cybersecurity defenses.

Keepnet helps organizations tackle this vulnerability by offering targeted security awareness training and phishing simulations that cover vishing, smishing, and QR phishing, mimicking real-world attacks. These customized simulations enable employees to recognize and avoid advanced phishing tactics, a key component in modern cyber defenses. With Keepnet’s behavior-based training, staff learn how to handle specific threats they’re likely to encounter, minimizing the risks posed by human error.

This combination of realistic simulations and focused training enhances organizations' ability to defend against evolving phishing techniques and social engineering attacks.

Watch the video below to discover how Keepnet Security Awareness Training can boost your organization’s defenses and equip your team with the skills to confidently navigate today’s complex cybersecurity landscape.

Watch the video below to see how Keepnet’s Phishing Simulator strengthens your defenses by training your team to quickly spot and respond to phishing threats.

Editor's Note: This article was updated on November 13, 2025.