GITNUXREPORT 2026

Cyber Attacks Statistics

Cyber attacks grew sharply last year, becoming more frequent, costly, and severe.

Rajesh Patel

Team Lead & Senior Researcher with over 15 years of experience in market research and data analytics.

First published: Feb 13, 2026

Our Commitment to Accuracy

Rigorous fact-checking · Reputable sources · Regular updatesLearn more

Statistic 1

Phishing remains the most common attack vector at 36% of breaches in 2023 per Verizon DBIR.

Statistic 2

Ransomware was involved in 24% of breaches analyzed in 2023.

Statistic 3

Use of stolen credentials caused 49% of web app breaches in 2023.

Statistic 4

DDoS attacks made up 15% of all incidents reported in 2023.

Statistic 5

Malware was a factor in 16% of security incidents in 2023 DBIR.

Statistic 6

Vulnerability exploitation accounted for 29% of breaches in 2023.

Statistic 7

Social engineering tactics used in 22% of initial access vectors.

Statistic 8

SQL injection responsible for 23% of web hacks in 2023.

Statistic 9

Business email compromise (BEC) scams led to $2.9 billion losses via 21,000 incidents.

Statistic 10

Cross-site scripting (XSS) in 7% of application attacks in 2023.

Statistic 11

Remote services like VPNs exploited in 63% of intrusions post-COVID.

Statistic 12

Cloud misconfigurations caused 19% of breaches in 2023.

Statistic 13

Man-in-the-middle attacks rose 26% targeting mobile users.

Statistic 14

Zero-day vulnerabilities exploited in 56% of attacks by advanced groups.

Statistic 15

Account takeover via credential stuffing in 80% of identity attacks.

Statistic 16

Supply chain compromises affected 25% of large breaches.

Statistic 17

IoT botnets like Mirai variants in 40% of DDoS attacks.

Statistic 18

Cryptojacking scripts hidden in 99% of legitimate sites scanned.

Statistic 19

Deepfake phishing increased 3x in executive targeting.

Statistic 20

Fileless malware evaded detection in 77% of memory attacks.

Statistic 21

Lateral movement via SMB exploits in 34% of network breaches.

Statistic 22

Vishing (voice phishing) up 329% in 2023 incidents.

Statistic 23

DNS tunneling used in 15% of data exfiltration attempts.

Statistic 24

Insider threats via privilege abuse in 20% of incidents.

Statistic 25

Watering hole attacks on industry sites up 50%.

Statistic 26

Evil twin Wi-Fi hotspots in 28% of public network attacks.

Statistic 27

The average cost of a data breach in 2023 was $4.45 million globally.

Statistic 28

Ransomware payments averaged $1.54 million per incident in 2023.

Statistic 29

Global cybercrime costs expected to hit $10.5 trillion annually by 2025.

Statistic 30

BEC scams caused $2.9 billion in losses from 21,000 complaints in 2023.

Statistic 31

Healthcare data breaches cost $10.93 million on average in 2023.

Statistic 32

Financial services faced $5.9 million average breach cost in 2023.

Statistic 33

Lost business amounted to 36% of total breach costs at $1.6 million avg.

Statistic 34

Detection and escalation costs averaged $1.58 million per breach.

Statistic 35

Post-breach response costs hit $1.24 million on average.

Statistic 36

Notification costs per breach averaged $0.31 million in 2023.

Statistic 37

DDoS attacks cost businesses $52,000 per hour of downtime in 2023.

Statistic 38

Global ransomware demanded $1 billion in payments in first half 2023.

Statistic 39

Cyber insurance claims rose 50% costing $7 billion in 2023.

Statistic 40

IP theft losses estimated at $600 billion annually worldwide.

Statistic 41

Phishing attacks led to $52 million average organizational loss.

Statistic 42

Supply chain attack costs averaged $4.9 million per incident.

Statistic 43

Cloud breach costs $4.75 million vs. $4.35 million on-premise.

Statistic 44

Mega breaches (50M+ records) cost $101 million on average.

Statistic 45

Average downtime from ransomware was 24 days costing $1.85M.

Statistic 46

Customer PII exposure costs added $0.39 million per breach.

Statistic 47

60% of SMEs fail within 6 months of cyber attack, costing billions.

Statistic 48

Dark web data sales from breaches generated $1.5 billion revenue.

Statistic 49

Fines and penalties averaged $4.95 million for non-compliant breaches.

Statistic 50

Reputation damage from breaches cost $1.5 million avg. in lost biz.

Statistic 51

Total global cybercrime damage $8 trillion in 2023.

Statistic 52

Healthcare industry saw $10.1 million avg. breach cost increase 53%.

Statistic 53

Energy sector breaches cost $4.84 million on average.

Statistic 54

Retail breach costs averaged $3.29 million in 2023.

Statistic 55

Public sector faced $2.67 million avg. per data breach.

Statistic 56

Manufacturing breaches cost $4.82 million average.

Statistic 57

83% of breaches involved customer PII costing extra $0.39M.

Statistic 58

In 2023, the average number of weekly cyber attacks worldwide reached 2,465, marking a 10% increase from 2022.

Statistic 59

DDoS attacks surged by 57% in 2023 compared to the previous year, totaling over 8 million incidents.

Statistic 60

Ransomware attacks increased by 93% year-over-year in 2023, with 2,228 publicly disclosed incidents.

Statistic 61

Phishing attacks accounted for 36% of all data breaches in 2023 according to the Verizon DBIR.

Statistic 62

Weekly malware attacks averaged 5.5 million globally in Q4 2023.

Statistic 63

In 2022, there were 1,802 ransomware attacks reported weekly worldwide.

Statistic 64

Global cyber attack attempts hit 2.9 billion in a single day in 2023.

Statistic 65

SQL injection attacks comprised 8% of web attacks in 2023.

Statistic 66

Botnet attacks increased by 70% in 2023, targeting 45% more organizations.

Statistic 67

Cross-site scripting (XSS) vulnerabilities led to 1,200 exploits per week in 2023.

Statistic 68

Global DDoS attack duration averaged 10 hours per incident in 2023.

Statistic 69

Ransomware victims paid an average of $1.54 million in 2023.

Statistic 70

83% of organizations experienced more than one cyber attack in 2023.

Statistic 71

Weekly cyber threats blocked reached 1.5 billion in 2023 by major firewalls.

Statistic 72

Multi-vector attacks rose 28% in 2023, combining DDoS and malware.

Statistic 73

Global phishing emails sent daily exceeded 3.4 billion in 2023.

Statistic 74

Zero-day exploits used in 25% of advanced persistent threats in 2023.

Statistic 75

Supply chain attacks impacted 61% of organizations in 2023 surveys.

Statistic 76

Mobile malware samples grew to 12.7 million unique in 2023.

Statistic 77

Global cyber attack costs projected to reach $10.5 trillion annually by 2025.

Statistic 78

300,000 new malware variants detected daily in 2023.

Statistic 79

DDoS attacks peaked at 3.8 Tbps in volume during 2023.

Statistic 80

94% of malware delivered via email in 2023.

Statistic 81

Global intrusions detected rose 42% in 2023.

Statistic 82

Phishing sites active numbered over 1 million daily in 2023.

Statistic 83

Ransomware groups active increased to 150 in 2023.

Statistic 84

API attacks surged 681% in 2023.

Statistic 85

Global password attacks hit 815 billion attempts in 2023.

Statistic 86

Cryptojacking incidents doubled to 80 million in 2023.

Statistic 87

Healthcare was the most attacked industry with 19% of attacks in 2023.

Statistic 88

Financial services experienced 16% of all reported breaches.

Statistic 89

Retail sector saw 10% of phishing-related incidents.

Statistic 90

Manufacturing faced 23% of ransomware attacks in 2023.

Statistic 91

Government entities hit by 14% of DDoS attacks.

Statistic 92

Education/research sector had 18% breach rate involving insiders.

Statistic 93

Healthcare ransomware hit rate 67% of organizations.

Statistic 94

Critical infrastructure targeted in 25% of nation-state attacks.

Statistic 95

Tech sector accounted for 12% of supply chain compromises.

Statistic 96

Energy/utilities saw 20% increase in intrusions.

Statistic 97

Transportation industry faced 15% of IoT attacks.

Statistic 98

Professional services had 11% of BEC scams.

Statistic 99

Media/entertainment DDoS targeted 22% more in elections.

Statistic 100

Pharma/chemicals vulnerable to IP theft in 30% cases.

Statistic 101

Hospitality sector phishing success rate 14% higher.

Statistic 102

Construction/engineering saw 17% malware incidents.

Statistic 103

Telecom providers blocked 40% of global attacks.

Statistic 104

Insurance faced highest breach costs at $5.9M avg.

Statistic 105

Aerospace/defense targeted by 28% APT groups.

Statistic 106

Wholesale trade had 9% of vulnerability exploits.

Statistic 107

US healthcare providers suffered 689 breaches in 2023.

Statistic 108

Finance sector lost $12.5B to cyber fraud in 2023.

Statistic 109

Gaming industry DDoS attacks up 200% during peaks.

Statistic 110

Legal services saw 13% insider threat incidents.

Statistic 111

Automotive supply chain attacks impacted 45% firms.

Statistic 112

US was site of 46% of global breaches in 2023.

Statistic 113

Europe saw 25% of ransomware incidents worldwide.

Statistic 114

Asia-Pacific region experienced 20% increase in DDoS.

Statistic 115

India faced 1.6 million cyber attacks weekly in 2023.

Statistic 116

UK reported 2,558 incidents to NCSC in last quarter 2023.

Statistic 117

Australia saw 76,000 cyber incidents in 2023.

Statistic 118

Brazil had 2.62 billion attacks in first half 2023.

Statistic 119

Middle East DDoS attacks up 30% targeting finance.

Statistic 120

Canada reported 15% rise in phishing to 35,000 cases.

Statistic 121

Germany faced 80,000 attacks daily on infrastructure.

Statistic 122

China blocked 59 million DDoS attacks in 2023.

Statistic 123

Africa saw 15% of global BEC scams originating.

Statistic 124

Japan experienced 6,452 cyber incidents in 2023.

Statistic 125

Russia hosted 60% of top malware C2 servers.

Statistic 126

Latin America ransomware victims up 50%.

Statistic 127

France CERT reported 800 major incidents in 2023.

Statistic 128

South Korea blocked 1.4 billion attacks in 2023.

Statistic 129

Eastern Europe origin of 35% global phishing kits.

Statistic 130

Mexico saw 400% rise in ransomware since 2020.

Statistic 131

Netherlands 30% of EU cloud breaches.

Statistic 132

UAE blocked 800 million attacks in 2023.

Statistic 133

Singapore reported 1,663 incidents, up 20%.

Statistic 134

Nigeria origin of 10% BEC complaints to FBI.

Statistic 135

Italy faced 4,800 attacks on public admin.

Statistic 136

Sweden CERT-SE handled 100,000 alerts.

Statistic 137

Saudi Arabia telecom attacks up 200%.

1/137

Sources

Trusted by 500+ publications

+497

While the digital world slept, cybercriminals were wide awake in 2023, launching a staggering 2,465 attacks every single week—a 10% surge from the year before—and setting the stage for a costly global crisis that will only escalate if left unchecked.

Key Takeaways

In 2023, the average number of weekly cyber attacks worldwide reached 2,465, marking a 10% increase from 2022.
DDoS attacks surged by 57% in 2023 compared to the previous year, totaling over 8 million incidents.
Ransomware attacks increased by 93% year-over-year in 2023, with 2,228 publicly disclosed incidents.
Phishing remains the most common attack vector at 36% of breaches in 2023 per Verizon DBIR.
Ransomware was involved in 24% of breaches analyzed in 2023.
Use of stolen credentials caused 49% of web app breaches in 2023.
The average cost of a data breach in 2023 was $4.45 million globally.
Ransomware payments averaged $1.54 million per incident in 2023.
Global cybercrime costs expected to hit $10.5 trillion annually by 2025.
Healthcare was the most attacked industry with 19% of attacks in 2023.
Financial services experienced 16% of all reported breaches.
Retail sector saw 10% of phishing-related incidents.
US was site of 46% of global breaches in 2023.
Europe saw 25% of ransomware incidents worldwide.
Asia-Pacific region experienced 20% increase in DDoS.

Cyber attacks grew sharply last year, becoming more frequent, costly, and severe.

Common Attack Vectors

Phishing remains the most common attack vector at 36% of breaches in 2023 per Verizon DBIR.
Ransomware was involved in 24% of breaches analyzed in 2023.
Use of stolen credentials caused 49% of web app breaches in 2023.
DDoS attacks made up 15% of all incidents reported in 2023.
Malware was a factor in 16% of security incidents in 2023 DBIR.
Vulnerability exploitation accounted for 29% of breaches in 2023.
Social engineering tactics used in 22% of initial access vectors.
SQL injection responsible for 23% of web hacks in 2023.
Business email compromise (BEC) scams led to $2.9 billion losses via 21,000 incidents.
Cross-site scripting (XSS) in 7% of application attacks in 2023.
Remote services like VPNs exploited in 63% of intrusions post-COVID.
Cloud misconfigurations caused 19% of breaches in 2023.
Man-in-the-middle attacks rose 26% targeting mobile users.
Zero-day vulnerabilities exploited in 56% of attacks by advanced groups.
Account takeover via credential stuffing in 80% of identity attacks.
Supply chain compromises affected 25% of large breaches.
IoT botnets like Mirai variants in 40% of DDoS attacks.
Cryptojacking scripts hidden in 99% of legitimate sites scanned.
Deepfake phishing increased 3x in executive targeting.
Fileless malware evaded detection in 77% of memory attacks.
Lateral movement via SMB exploits in 34% of network breaches.
Vishing (voice phishing) up 329% in 2023 incidents.
DNS tunneling used in 15% of data exfiltration attempts.
Insider threats via privilege abuse in 20% of incidents.
Watering hole attacks on industry sites up 50%.
Evil twin Wi-Fi hotspots in 28% of public network attacks.

Common Attack Vectors Interpretation

If your cybersecurity plan is still just a strong password and a prayer, then the sobering math of modern threats—where human error is the favorite entry point, stolen keys open half the digital doors, and even your coffee shop’s Wi-Fi might be an actor in a villain’s play—should have you reaching for something far more robust.

Financial Losses

The average cost of a data breach in 2023 was $4.45 million globally.
Ransomware payments averaged $1.54 million per incident in 2023.
Global cybercrime costs expected to hit $10.5 trillion annually by 2025.
BEC scams caused $2.9 billion in losses from 21,000 complaints in 2023.
Healthcare data breaches cost $10.93 million on average in 2023.
Financial services faced $5.9 million average breach cost in 2023.
Lost business amounted to 36% of total breach costs at $1.6 million avg.
Detection and escalation costs averaged $1.58 million per breach.
Post-breach response costs hit $1.24 million on average.
Notification costs per breach averaged $0.31 million in 2023.
DDoS attacks cost businesses $52,000 per hour of downtime in 2023.
Global ransomware demanded $1 billion in payments in first half 2023.
Cyber insurance claims rose 50% costing $7 billion in 2023.
IP theft losses estimated at $600 billion annually worldwide.
Phishing attacks led to $52 million average organizational loss.
Supply chain attack costs averaged $4.9 million per incident.
Cloud breach costs $4.75 million vs. $4.35 million on-premise.
Mega breaches (50M+ records) cost $101 million on average.
Average downtime from ransomware was 24 days costing $1.85M.
Customer PII exposure costs added $0.39 million per breach.
60% of SMEs fail within 6 months of cyber attack, costing billions.
Dark web data sales from breaches generated $1.5 billion revenue.
Fines and penalties averaged $4.95 million for non-compliant breaches.
Reputation damage from breaches cost $1.5 million avg. in lost biz.
Total global cybercrime damage $8 trillion in 2023.
Healthcare industry saw $10.1 million avg. breach cost increase 53%.
Energy sector breaches cost $4.84 million on average.
Retail breach costs averaged $3.29 million in 2023.
Public sector faced $2.67 million avg. per data breach.
Manufacturing breaches cost $4.82 million average.
83% of breaches involved customer PII costing extra $0.39M.

Financial Losses Interpretation

One way to interpret the staggering toll of these statistics is that modern cybercrime operates like a grotesquely efficient, multi-trillion-dollar corporation where the customer is always the victim, the product is your data, and the only growth metric that matters is your misery.

Global Attack Volume

In 2023, the average number of weekly cyber attacks worldwide reached 2,465, marking a 10% increase from 2022.
DDoS attacks surged by 57% in 2023 compared to the previous year, totaling over 8 million incidents.
Ransomware attacks increased by 93% year-over-year in 2023, with 2,228 publicly disclosed incidents.
Phishing attacks accounted for 36% of all data breaches in 2023 according to the Verizon DBIR.
Weekly malware attacks averaged 5.5 million globally in Q4 2023.
In 2022, there were 1,802 ransomware attacks reported weekly worldwide.
Global cyber attack attempts hit 2.9 billion in a single day in 2023.
SQL injection attacks comprised 8% of web attacks in 2023.
Botnet attacks increased by 70% in 2023, targeting 45% more organizations.
Cross-site scripting (XSS) vulnerabilities led to 1,200 exploits per week in 2023.
Global DDoS attack duration averaged 10 hours per incident in 2023.
Ransomware victims paid an average of $1.54 million in 2023.
83% of organizations experienced more than one cyber attack in 2023.
Weekly cyber threats blocked reached 1.5 billion in 2023 by major firewalls.
Multi-vector attacks rose 28% in 2023, combining DDoS and malware.
Global phishing emails sent daily exceeded 3.4 billion in 2023.
Zero-day exploits used in 25% of advanced persistent threats in 2023.
Supply chain attacks impacted 61% of organizations in 2023 surveys.
Mobile malware samples grew to 12.7 million unique in 2023.
Global cyber attack costs projected to reach $10.5 trillion annually by 2025.
300,000 new malware variants detected daily in 2023.
DDoS attacks peaked at 3.8 Tbps in volume during 2023.
94% of malware delivered via email in 2023.
Global intrusions detected rose 42% in 2023.
Phishing sites active numbered over 1 million daily in 2023.
Ransomware groups active increased to 150 in 2023.
API attacks surged 681% in 2023.
Global password attacks hit 815 billion attempts in 2023.
Cryptojacking incidents doubled to 80 million in 2023.

Global Attack Volume Interpretation

The digital landscape in 2023 was less a battlefield and more a frenzied, multi-vector siege, where the cost of a coffee break for a global business now includes ransomware's million-dollar ransom, a 3.4-billion-email phishing onslaught, and the constant hum of botnets targeting nearly half of all organizations with relentless, creative malice.

Industry Impacts

Healthcare was the most attacked industry with 19% of attacks in 2023.
Financial services experienced 16% of all reported breaches.
Retail sector saw 10% of phishing-related incidents.
Manufacturing faced 23% of ransomware attacks in 2023.
Government entities hit by 14% of DDoS attacks.
Education/research sector had 18% breach rate involving insiders.
Healthcare ransomware hit rate 67% of organizations.
Critical infrastructure targeted in 25% of nation-state attacks.
Tech sector accounted for 12% of supply chain compromises.
Energy/utilities saw 20% increase in intrusions.
Transportation industry faced 15% of IoT attacks.
Professional services had 11% of BEC scams.
Media/entertainment DDoS targeted 22% more in elections.
Pharma/chemicals vulnerable to IP theft in 30% cases.
Hospitality sector phishing success rate 14% higher.
Construction/engineering saw 17% malware incidents.
Telecom providers blocked 40% of global attacks.
Insurance faced highest breach costs at $5.9M avg.
Aerospace/defense targeted by 28% APT groups.
Wholesale trade had 9% of vulnerability exploits.
US healthcare providers suffered 689 breaches in 2023.
Finance sector lost $12.5B to cyber fraud in 2023.
Gaming industry DDoS attacks up 200% during peaks.
Legal services saw 13% insider threat incidents.
Automotive supply chain attacks impacted 45% firms.

Industry Impacts Interpretation

While our medical records now have worse security than our online shopping carts, the cybercriminals targeting healthcare, finance, and critical infrastructure have shown that their business model is thriving in a digital world that's sicker than its patients.

Regional Statistics

US was site of 46% of global breaches in 2023.
Europe saw 25% of ransomware incidents worldwide.
Asia-Pacific region experienced 20% increase in DDoS.
India faced 1.6 million cyber attacks weekly in 2023.
UK reported 2,558 incidents to NCSC in last quarter 2023.
Australia saw 76,000 cyber incidents in 2023.
Brazil had 2.62 billion attacks in first half 2023.
Middle East DDoS attacks up 30% targeting finance.
Canada reported 15% rise in phishing to 35,000 cases.
Germany faced 80,000 attacks daily on infrastructure.
China blocked 59 million DDoS attacks in 2023.
Africa saw 15% of global BEC scams originating.
Japan experienced 6,452 cyber incidents in 2023.
Russia hosted 60% of top malware C2 servers.
Latin America ransomware victims up 50%.
France CERT reported 800 major incidents in 2023.
South Korea blocked 1.4 billion attacks in 2023.
Eastern Europe origin of 35% global phishing kits.
Mexico saw 400% rise in ransomware since 2020.
Netherlands 30% of EU cloud breaches.
UAE blocked 800 million attacks in 2023.
Singapore reported 1,663 incidents, up 20%.
Nigeria origin of 10% BEC complaints to FBI.
Italy faced 4,800 attacks on public admin.
Sweden CERT-SE handled 100,000 alerts.
Saudi Arabia telecom attacks up 200%.

Regional Statistics Interpretation

The world's cyber battlegrounds are distressingly active, with the US drawing nearly half of all global breaches, Europe absorbing a quarter of ransomware hits, and the Asia-Pacific weathering a rising tide of DDoS attacks, proving that in the digital age, no nation is an island—merely a potential target on a very crowded map.

Sources & References

Logos provided by Logo.dev