While the world was sleeping, cybercriminals quietly stole over $12.5 billion last year alone, a staggering toll revealed by the FBI's latest report that exposes the alarming scale and sophistication of modern digital crime.
Key Takeaways
- In 2023, the FBI's Internet Crime Complaint Center (IC3) received 880,418 complaints of cyber crime with total reported losses exceeding $12.5 billion USD.
- Business Email Compromise (BEC) scams caused $2.9 billion in losses in 2023 according to the FBI IC3 report.
- Investment fraud complaints rose to 69,000 in 2023 with losses of $4.57 billion as per FBI IC3 data.
- In 2023, over 300 million personal records were exposed in data breaches worldwide per Surfshark.
- MOVEit breach in 2023 affected 62 million individuals per HHS.
- Change Healthcare breach exposed 1/3 of Americans' health data in 2024 per HHS.
- Ransomware groups claimed 2,000 victims in 2023 per SOCRadar.
- LockBit claimed 2,539 victims in 2023 per Group-IB.
- Conti ransomware disbanded after infecting 1,773 organizations per Elliptic.
- Phishing emails rose 58% to 3.4 billion in 2023 per APWG.
- 300,000 phishing sites detected daily in 2023 per APWG.
- Smishing attacks up 47% in 2023 to 1.6 million per Zimperium.
- Global DDoS attacks surged 118% to 9.5 million in 2023 per Cloudflare.
- Cyber attacks on IoT devices up 107% in 2023 per SonicWall.
- AI-powered cyber attacks increased 50% in 2023 per Darktrace.
Cyber crime cost over $12 billion in damages last year alone.
Data Breaches
1In 2023, over 300 million personal records were exposed in data breaches worldwide per Surfshark.
Verified2MOVEit breach in 2023 affected 62 million individuals per HHS.
Verified3Change Healthcare breach exposed 1/3 of Americans' health data in 2024 per HHS.
Verified4Equifax breach in 2017 exposed 147 million SSNs per FTC.
Directional5Yahoo's 2013 breach affected 3 billion accounts per SEC filing.
Single source6Marriott Starwood breach 2018-2020 exposed 383 million guest records per company notice.
Verified7Capital One breach 2019 affected 106 million customers per AWS announcement.
Verified8Twitter (X) breach 2022 exposed 200 million email addresses per Have I Been Pwned.
Verified9Optus Australia breach 2022 leaked 10 million customer records per OAIC.
Directional10Uber breach 2022 exposed 57 million user data per company blog.
Single source11LinkedIn scraped 700 million user data in 2021 per Cybernews.
Verified12T-Mobile 2021 breach affected 54 million customers per FCC fine.
Verified13Sony Pictures 2014 breach leaked 47,000 SSNs and emails per FBI.
Verified14Anthem breach 2015 exposed 78.8 million health records per HHS.
Directional15eBay 2014 breach compromised 145 million user credentials per company.
Single source16Adobe 2013 breach leaked 153 million user records per Krebs.
Verified17LastPass 2022 breach exposed encrypted vaults of 30 million users per company.
Verified18Snowflake breaches 2024 affected 165 organizations with millions of records per Mandiant.
Verified19MGM Resorts 2024 breach cost $100 million and exposed guest data per SEC filing.
Directional20Ascension Health 2024 ransomware breach disrupted services for millions per HHS.
Single source21CrowdStrike outage 2024 not a breach but affected 8.5 million devices per company.
Verified22AT&T 2024 breach leaked 109 million call records per company notice.
Verified23National Public Data breach 2024 exposed 2.9 billion records per ClassAction.org.
Verified24Change Healthcare 2024 breach impacted 190 million claims per UnitedHealth.
Directional25Verizon DBIR 2024 notes 68% of breaches involve human element per Verizon.
Single source265,200 data breaches reported in US 2023 per ITRC.
Verified27Healthcare sector saw 540 major breaches in 2023 exposing 113 million records per HHS.
Verified28Retail breaches averaged 15 million records exposed per incident in 2023 per IBM.
VerifiedData Breaches Interpretation
Our collective digital identity is being auctioned off piecemeal in an endless yard sale, yet we still act surprised when the items on the shelf keep changing hands.
Emerging Threats and Trends
1Global DDoS attacks surged 118% to 9.5 million in 2023 per Cloudflare.
Verified2Cyber attacks on IoT devices up 107% in 2023 per SonicWall.
Verified3AI-powered cyber attacks increased 50% in 2023 per Darktrace.
Verified4Deepfake incidents rose 550% in 2023 per Sumsub.
Directional5Supply chain attacks up 42% in 2023 per ENISA.
Single source6Zero-day exploits used in 25% of attacks per Google TAG.
Verified7Cryptocurrency thefts totaled $3.7 billion in 2023 per Chainalysis.
Verified8Nation-state attacks doubled to 40 per Mandiant M-Trends 2024.
Verified9Mobile malware samples hit 12.7 million in 2023 per Kaspersky.
Directional10OT/ICS attacks up 50% in 2023 per Dragos.
Single source11Cloud misconfigurations caused 20% of breaches per Palo Alto.
Verified12Generative AI misuse in attacks up 300% per CrowdStrike.
Verified1375% of orgs expect AI to change cyber threats per Gartner.
Verified14Infostealer malware infections 300 million in 2023 per SpyCloud.
Directional15Quantum computing threats to encryption by 2030 per NIST.
Single source165G networks saw 15% attack increase per GSMA.
Verified17Ransomware-as-a-Service groups grew to 150 in 2023 per SOCRadar.
Verified18Insider threats up 44% in 2023 per Gartner.
Verified19Cyber espionage campaigns 30% rise per Microsoft.
Directional20Edge computing attacks projected 2x by 2025 per IDC.
Single sourceEmerging Threats and Trends Interpretation
While the cyber attackers are busy doubling down on everything from DDoS to deepfakes and recruiting insiders for their heists, the rest of us are left frantically updating our passwords and hoping AI doesn't figure out how to change the channel on our smart fridges.
Financial Losses
1In 2023, the FBI's Internet Crime Complaint Center (IC3) received 880,418 complaints of cyber crime with total reported losses exceeding $12.5 billion USD.
Verified2Business Email Compromise (BEC) scams caused $2.9 billion in losses in 2023 according to the FBI IC3 report.
Verified3Investment fraud complaints rose to 69,000 in 2023 with losses of $4.57 billion as per FBI IC3 data.
Verified4Cryptocurrency investment scams led to $4.57 billion in losses from 69,000 complaints in 2023 per FBI.
Directional5Elder fraud complaints totaled 101,066 in 2023 with $3.4 billion losses reported to IC3.
Single source6Global cybercrime costs are projected to reach $10.5 trillion annually by 2025 according to Cybersecurity Ventures.
Verified7Ransomware damage costs are expected to hit $265 billion annually by 2031 per Cybersecurity Ventures.
Verified8Average cost of a data breach in 2023 was $4.45 million according to IBM Cost of a Data Breach Report.
Verified9Phishing attacks cost businesses an average of $4.91 million per incident in 2023 per Proofpoint.
Directional10BEC attacks resulted in $43 billion global losses from 2016 to 2021 per FBI estimates.
Single source11Tech support scams caused $862 million in losses in 2022 per FBI IC3.
Verified12Romance scams led to $1.3 billion in losses from 70,000+ complaints in 2022 FBI data.
Verified13Global cyber fraud losses reached $6 trillion in 2021 per Nilson Report.
Verified14Average ransomware payment in 2023 was $1.54 million per Coveware report.
Directional15U.S. businesses lost $5.1 billion to cybercrime in 2022 per Statista.
Single source16Online shopping fraud losses hit $48 billion globally in 2023 per Juniper Research.
Verified17Wire transfer fraud caused $1.8 billion losses in 2023 FBI IC3.
Verified18Credit card fraud losses worldwide were $33 billion in 2022 per Nilson.
Verified19Corporate account takeover losses averaged $140,000 per incident per FBI.
Directional20Global cost of cybercrime expected to be $8 trillion in 2023 per Cybersecurity Ventures.
Single source21Smishing attacks cost $1.5 million average per organization in 2023 per Proofpoint.
Verified22Check fraud losses reached $20 billion in 2023 per ABA.
Verified23Insurance claims for cyber incidents cost $2.5 billion in 2022 per Munich Re.
Verified24Dark web data sales generated $1.5 billion revenue in 2023 per Recorded Future.
Directional25Vishing scams led to $300 million losses in 2023 per FTC.
Single source26Global ATM jackpotting fraud losses $50 million in 2022 per ATMIA.
Verified27Payroll diversion fraud cost $250 million in 2023 per FBI.
Verified28Cryptojacking revenue reached $2 billion in 2023 per Chainalysis.
Verified29Merchant POS fraud losses $10 billion annually per LexisNexis.
Directional30Average BEC loss per victim $120,000 in 2023 per FBI IC3.
Single sourceFinancial Losses Interpretation
It’s a staggering and expensive truth that in our digital age, we have collectively built a multi-trillion-dollar economy that primarily benefits scammers, fraudsters, and extortionists.
Phishing Attacks
1Phishing emails rose 58% to 3.4 billion in 2023 per APWG.
Verified2300,000 phishing sites detected daily in 2023 per APWG.
Verified3Smishing attacks up 47% in 2023 to 1.6 million per Zimperium.
Verified484% of orgs faced phishing in 2023 per Proofpoint.
Directional5BEC phishing caused 21,439 complaints with $2.9B losses in 2023 FBI.
Single source6Vishing incidents up 168% in 2023 per Group-IB.
Verified790% of data breaches start with phishing per Verizon DBIR 2024.
Verified8Microsoft detected 2.3 billion phishing attempts daily in 2023 per DART.
Verified9Spear-phishing success rate 71% vs 5% generic per Proofpoint.
Directional10QR code phishing (quishing) up 51% in 2023 per KnowBe4.
Single source111 in 5 users click phishing links per Google.
Verified12Malicious SMS messages hit 12 billion in 2023 per GlobalSign.
Verified1336% of BEC attacks via phone per FBI 2023.
Verified14Phishing kits sold on dark web for $50 average per Recorded Future.
Directional154.7 million phishing-related complaints to IC3 in 2023 per FBI.
Single source16Evilginx2 phishing framework used in 40% attacks per Netcraft.
Verified17Brand impersonation in phishing up 59% in 2023 per Proofpoint.
Verified1898% of attacks rely on phishing per Egress.
Verified19Average phishing email click time 1 minute per KnowBe4.
Directional2079% of orgs hit by credential phishing in 2023 per Verizon.
Single source21WhatsApp phishing scams up 280% in 2023 per Kaspersky.
Verified221.2 billion login credentials exposed via phishing in 2023 per SpyCloud.
Verified23AI-generated phishing emails up 1,265% in 2023 per SlashNext.
VerifiedPhishing Attacks Interpretation
If humanity's collective inbox were a casino, phishing would be the alarmingly effective con game where nearly everyone loses, the house always wins, and the dealers just got a massive AI-powered upgrade.
Ransomware Incidents
1Ransomware groups claimed 2,000 victims in 2023 per SOCRadar.
Verified2LockBit claimed 2,539 victims in 2023 per Group-IB.
Verified3Conti ransomware disbanded after infecting 1,773 organizations per Elliptic.
Verified4Cl0p exploited MOVEit vulnerability affecting 1,000+ orgs in 2023 per CISA.
Directional5ALPHV/BlackCat extorted $300 million before FBI disruption in 2024 per DOJ.
Single source6Akira ransomware hit 123 victims in Q1 2024 per Emsisoft.
Verified7LockBit 3.0 used in 62% of ransomware attacks in 2023 per Sophos.
Verified8Medusa ransomware emerged in 2023 claiming 60+ high-profile victims per Cyble.
Verified9Rhysida hit 100+ orgs including hospitals in 2023 per CISA.
Directional10Hive ransomware disrupted by FBI affecting 1,500+ victims per DOJ.
Single source11REvil shut down after 400+ attacks costing $200 million per Chainalysis.
Verified12DarkSide Colonial Pipeline attack 2021 led to $4.4 million ransom payment per DOJ.
Verified13JBS meatpacking 2021 paid $11 million ransom after attack per company.
Verified14Ireland HSE health service 2021 Conti attack disrupted services for weeks per HIQA.
Directional15Costa Rica government 2022 Conti siege led to state of emergency per Reuters.
Single source16Change Healthcare 2024 ALPHV attack disrupted US prescriptions per HHS.
Verified17French hospital 2021 Ryuk attack caused patient death per Le Monde.
Verified18Universal Health Services 2020 Ryuk hit 400 facilities per company.
Verified19Ascension 2024 ransomware disrupted 140 hospitals per Becker's.
Directional20CDK Global 2024 attack crippled 15,000 car dealers per Reuters.
Single source21236.1 million ransomware attacks in 2022 per Check Point.
Verified22Q3 2023 saw 140 new ransomware groups per Cyble.
Verified2366% of orgs hit by ransomware in 2023 paid per Sophos.
VerifiedRansomware Incidents Interpretation
Behind the eye-popping victim tallies and staggering ransom payouts lies a grim reality: ransomware isn't just a digital shakedown but a systemic siege that is increasingly holding the physical world—from hospitals to hamburgers—hostage.
Sources & References
- Reference 1IC3ic3.govVisit source
- Reference 2CYBERSECURITYVENTUREScybersecurityventures.comVisit source
- Reference 3IBMibm.comVisit source
- Reference 4PROOFPOINTproofpoint.comVisit source
- Reference 5NILSONREPORTnilsonreport.comVisit source
- Reference 6COVEWAREcoveware.comVisit source
- Reference 7STATISTAstatista.comVisit source
- Reference 8JUNIPERRESEARCHjuniperresearch.comVisit source
- Reference 9ABAaba.comVisit source
- Reference 10MUNICHREmunichre.comVisit source
- Reference 11RECORDEDFUTURErecordedfuture.comVisit source
- Reference 12FTCftc.govVisit source
- Reference 13ATMIAatmia.comVisit source
- Reference 14CHAINALYSISchainalysis.comVisit source
- Reference 15RISKrisk.lexisnexis.comVisit source
- Reference 16SURFSHARKsurfshark.comVisit source
- Reference 17HHShhs.govVisit source
- Reference 18SECsec.govVisit source
- Reference 19NEWSnews.marriott.comVisit source
- Reference 20CAPITALONEcapitalone.comVisit source
- Reference 21HAVEIBEENPWNEDhaveibeenpwned.comVisit source
- Reference 22OAICoaic.gov.auVisit source
- Reference 23UBERuber.comVisit source
- Reference 24CYBERNEWScybernews.comVisit source
- Reference 25FCCfcc.govVisit source
- Reference 26FBIfbi.govVisit source
- Reference 27EBAYINCebayinc.comVisit source
- Reference 28KREBSONSECURITYkrebsonsecurity.comVisit source
- Reference 29BLOGblog.lastpass.comVisit source
- Reference 30CLOUDcloud.google.comVisit source
- Reference 31CROWDSTRIKEcrowdstrike.comVisit source
- Reference 32ABOUTabout.att.comVisit source
- Reference 33CLASSACTIONclassaction.orgVisit source
- Reference 34UNITEDHEALTHGROUPunitedhealthgroup.comVisit source
- Reference 35VERIZONverizon.comVisit source
- Reference 36IDTHEFTCENTERidtheftcenter.orgVisit source
- Reference 37SOCRADARsocradar.ioVisit source
- Reference 38GROUP-IBgroup-ib.comVisit source
- Reference 39ELLIPTICelliptic.coVisit source
- Reference 40CISAcisa.govVisit source
- Reference 41JUSTICEjustice.govVisit source
- Reference 42EMSISOFTemsisoft.comVisit source
- Reference 43SOPHOSsophos.comVisit source
- Reference 44CYBLEcyble.comVisit source
- Reference 45BLOGblog.chainalysis.comVisit source
- Reference 46INVESTORSinvestors.jbsfoodsgroup.comVisit source
- Reference 47HIQAhiqa.ieVisit source
- Reference 48REUTERSreuters.comVisit source
- Reference 49LEMONDElemonde.frVisit source
- Reference 50UHSINCuhsinc.comVisit source
- Reference 51BECKERSHOSPITALREVIEWbeckershospitalreview.comVisit source
- Reference 52RESEARCHresearch.checkpoint.comVisit source
- Reference 53DOCSdocs.apwg.orgVisit source
- Reference 54ZIMPERIUMzimperium.comVisit source
- Reference 55MICROSOFTmicrosoft.comVisit source
- Reference 56KNOWBE4knowbe4.comVisit source
- Reference 57BLOGblog.googleVisit source
- Reference 58GLOBALSIGNglobalsign.comVisit source
- Reference 59NETCRAFTnetcraft.comVisit source
- Reference 60EGRESSegress.comVisit source
- Reference 61KASPERSKYkaspersky.comVisit source
- Reference 62SPYCLOUDspycloud.comVisit source
- Reference 63SLASHNEXTslashnext.comVisit source
- Reference 64BLOGblog.cloudflare.comVisit source
- Reference 65SONICWALLsonicwall.comVisit source
- Reference 66DARKTRACEdarktrace.comVisit source
- Reference 67SUMSUBsumsub.comVisit source
- Reference 68ENISAenisa.europa.euVisit source
- Reference 69MANDIANTmandiant.comVisit source
- Reference 70SECURELISTsecurelist.comVisit source
- Reference 71DRAGOSdragos.comVisit source
- Reference 72PALOALTONETWORKSpaloaltonetworks.comVisit source
- Reference 73GARTNERgartner.comVisit source
- Reference 74NISTnist.govVisit source
- Reference 75GSMAgsma.comVisit source
- Reference 76IDCidc.comVisit source