Cybercrime imposed an estimated 27.6 billion dollar global cost on organizations. Human error influences roughly 95 percent of incidents. Median ransom demands reach 5 million dollars while encryption adoption produces the lowest breach costs at 3.31 million dollars on average.
Key Takeaways
- Organizations that used encryption saw the lowest breach costs ($3.31 million average) (encryption cost result)
- Non-payment/Non-delivery fraud resulted in $1.2 billion in losses in 2023 (FBI IC3 category losses)
- In 2023, the median ransom demand was $5 million (median figure)
- The global managed security services market is forecast to reach $35.7 billion in 2024 (market size forecast)
- The global SIEM market is expected to grow to $7.9 billion by 2027 (market forecast)
- $27.6 billion was the estimated global cost of cybercrime in 2023 (estimated annual cost figure for a reference year).
- In 2024, 68% of adults reported being concerned about becoming a victim of a cyberattack (survey-based concern)
- In 2024, 74% of organizations reported using EDR (endpoint detection and response) tools (EDR adoption share).
- In 2024, 57% of organizations reported deploying vulnerability scanners (vulnerability-scanner deployment prevalence).
- In 2023, 71% of data breach incidents involved a third-party (vendor) relationship (DBIR/third-party involvement figure)
- Incidents averaged 277 days to identify and contain in 2023 (median time-to-detect-and-contain metric).
- In 2024, Microsoft reported that 1.1 trillion authentication requests were blocked by security controls (blocked-authentication volume).
- In 2024, the median dwell time for ransomware-related detections was 9 days (median dwell/detection latency).
- In 2024, 17% of ransomware victims reported having their data leaked publicly (data-leak victimization rate).
- Roughly 95% of cybersecurity incidents are believed to be caused or influenced by human error (human-error influence estimate).
Cybercrime cost about $27.6 billion in 2023, while encryption reduced breach expenses to an average $3.31 million.
Related reading
01 · Category
Threat Patterns7 stats
01
In 2024, 17% of ransomware victims reported having their data leaked publicly (data-leak victimization rate).
02
Roughly 95% of cybersecurity incidents are believed to be caused or influenced by human error (human-error influence estimate).
03
In 2024, the NIST National Vulnerability Database contained over 25,000 new CVE records (new CVEs added).
04
Google’s Threat Analysis Group observed a 35% year-over-year increase in phishing pages in 2023 (phishing-page growth).
05
In 2023, the number of DDoS attacks reported by Cloudflare declined by 6% year over year (year-over-year change).
06
In 2023, 42% of organizations experienced cloud security misconfiguration issues (misconfiguration prevalence).
07
In 2023, 33% of breaches involved misconfigured cloud services (cloud misconfiguration involvement share).
Interpretation
Threat Patterns Interpretation
For the Threat Patterns angle, the biggest signal is that human-related weaknesses are driving the landscape, with about 95% of cybersecurity incidents linked to human error while threat activity also escalates, such as Google’s 35% year-over-year rise in phishing pages in 2023 and 17% of ransomware victims reporting public data leaks in 2024.
02 · Category
Incidents & Losses3 stats
01
Organizations that used encryption saw the lowest breach costs ($3.31 million average) (encryption cost result)
02
Non-payment/Non-delivery fraud resulted in $1.2 billion in losses in 2023 (FBI IC3 category losses)
03
In 2023, the median ransom demand was $5 million (median figure)
Interpretation
Incidents & Losses Interpretation
Within Incidents & Losses, the data shows that encryption is associated with the lowest breach costs at an average of $3.31 million, while fraud and ransomware remain severe drivers of loss, including $1.2 billion in non-payment or non-delivery fraud in 2023 and a median ransom demand of $5 million that same year.
03 · Category
Market Size3 stats
01
The global managed security services market is forecast to reach $35.7 billion in 2024 (market size forecast)
02
The global SIEM market is expected to grow to $7.9 billion by 2027 (market forecast)
03
$27.6 billion was the estimated global cost of cybercrime in 2023 (estimated annual cost figure for a reference year).
Interpretation
Market Size Interpretation
From a market size perspective, cyber security demand is expanding quickly, with the managed security services market projected to hit $35.7 billion in 2024 and the SIEM market expected to reach $7.9 billion by 2027, even as cybercrime already cost an estimated $27.6 billion globally in 2023.
More related reading
04 · Category
User Adoption3 stats
01
In 2024, 68% of adults reported being concerned about becoming a victim of a cyberattack (survey-based concern)
02
In 2024, 74% of organizations reported using EDR (endpoint detection and response) tools (EDR adoption share).
03
In 2024, 57% of organizations reported deploying vulnerability scanners (vulnerability-scanner deployment prevalence).
Interpretation
User Adoption Interpretation
In the User Adoption area, concern is already widespread as 68% of adults in 2024 said they worry about becoming victims, while organizations are translating that awareness into action with 74% using EDR tools and 57% deploying vulnerability scanners.
05 · Category
Performance Metrics3 stats
01
Incidents averaged 277 days to identify and contain in 2023 (median time-to-detect-and-contain metric).
02
In 2024, Microsoft reported that 1.1 trillion authentication requests were blocked by security controls (blocked-authentication volume).
03
In 2024, the median dwell time for ransomware-related detections was 9 days (median dwell/detection latency).
Interpretation
Performance Metrics Interpretation
Performance metrics show how quickly cyber threats are being managed as 2023 incidents took a median 277 days to identify and contain while 2024 saw 1.1 trillion blocked authentication requests and ransomware detections reaching a median dwell time of just 9 days.
06 · Category
Industry Overview2 stats
01
In 2023, 71% of data breach incidents involved a third-party (vendor) relationship (DBIR/third-party involvement figure)
02
In 2023, 1% of U.K. businesses reported paying a ransom (ransom payment prevalence).
Interpretation
Industry Overview Interpretation
From an industry overview perspective, the 71% share of data breach incidents involving third-party relationships in 2023 shows that supply-chain exposure is a core cyber risk, and the fact that only 1% of U.K. businesses reported paying a ransom suggests attacks may be increasingly driven by access through partners rather than direct ransom negotiations.
report visual · Key figures
Cyber crime: how threats manifest and evolve
Ransomware and social engineering are linked with high-risk outcomes, while operational delays in detection and containment remain substantial—signaling the need to reduce dwell time and human-driven failures.
17%
In 2024, 17% of ransomware victims reported having their data leaked publicly (data-leak victimization rate).
35%
Google’s Threat Analysis Group observed a 35% year-over-year increase in phishing pages in 2023 (phishing-page growth).
277
Incidents averaged 277 days to identify and contain in 2023 (median time-to-detect-and-contain metric).
2024
In 2024, the median dwell time for ransomware-related detections was 9 days (median dwell/detection latency).
source-verifiedcisa.gov · transparencyreport.google.com · ibm.com · sentinelone.com2024
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Lars Eriksen. (2026, February 13). Cyber Crime Statistics. Gitnux. https://gitnux.org/cyber-crime-statistics
MLA
Lars Eriksen. "Cyber Crime Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/cyber-crime-statistics.
Chicago
Lars Eriksen. 2026. "Cyber Crime Statistics." Gitnux. https://gitnux.org/cyber-crime-statistics.
Sources & references
21 datasets cited across this report · attribution is report-level
+4 additional datasets cited (not shown individually)