While one simple click on a deceptive email is all it takes, the staggering reality is that 90% of successful cyberattacks begin with a phishing attempt, making it the single greatest threat to our digital safety today.
Key Takeaways
- In 2023, phishing attacks represented 36% of all data breaches analyzed in the Verizon Data Breach Investigations Report
- Globally, 83% of organizations experienced at least one successful phishing attack in 2022 according to Proofpoint's State of the Phish report
- Phishing was the initial attack vector in 44% of breaches involving social engineering per Verizon DBIR 2023
- Ransomware attacks grew 93% year-over-year in 2023 per Sophos State of Ransomware report
- 66% of organizations hit by ransomware in 2023 paid the ransom per Sophos
- Average ransomware recovery cost $1.54 million in 2022 per Sophos data
- Global data breaches cost $4.45 million average in 2023 per IBM report
- 2,365 confirmed data breaches in US in 2023 per Identity Theft Resource Center
- 82% of breaches involve human element per Verizon DBIR 2023
- 42% of internet users experienced online harassment in 2023 per Pew Research
- 41% of Americans faced cyberbullying in 2022 per Statista survey
- 59% of US teens experienced cyberbullying per Pew 2022 Teens and Cyberbullying
- Identity theft complaints reached 1.1 million in 2023 per FTC
- $12.5 billion in fraud losses in 2023 per FTC Consumer Sentinel
- 465,000 credit card fraud reports in 2023 per FTC data
Phishing remains the leading cause of devastating cyberattacks and data breaches globally.
Cyberbullying and Harassment
142% of internet users experienced online harassment in 2023 per Pew Research
Verified241% of Americans faced cyberbullying in 2022 per Statista survey
Verified359% of US teens experienced cyberbullying per Pew 2022 Teens and Cyberbullying
Verified437% of youth aged 12-17 faced online harassment in 2023 per Cyberbullying Research Center
Directional5Women are 27% more likely to experience severe harassment online per Pew 2021 data updated 2023
Single source664% of gamers report harassment in online games per ADL 2023 report
Verified7Doxxing incidents rose 50% in 2023 per Enea report on online abuse
Verified81 in 3 children experience cyberbullying by age 12 per UNICEF 2023 study
Verified946% of LGBTQ+ youth faced online harassment per GLSEN 2023 survey
Directional10Swatting calls increased 500% targeting schools in 2023 per FBI
Single source1172% of teachers witnessed cyberbullying among students per NEA 2023 survey
Verified12Online harassment leads to 20% increase in teen suicide ideation per JAMA 2023 study
Verified1328% of adults experienced severe harassment forms like stalking per Pew 2023
Verified14Revenge porn reports up 33% in 2023 per Cyber Civil Rights Initiative
Directional1555% of cyberbullying victims experience mental health issues per StopBullying.gov 2023
Single source16Gaming platforms see 1 in 5 users harassed daily per Newzoo 2023 report
Verified1767% of harassment on Twitter/X is political per CCDH 2023 study
Verified18School cyberbullying reports doubled since 2020 per NCES 2023 data
Verified1981% of children keep cyberbullying secret from parents per Ditch the Label 2023
Directional20Female streamers face 3x more harassment than males per Streamlabs 2023
Single source2149% of online harassment targets appearance per YouGov 2023 poll
Verified22Cyberstalking affects 16% of internet users per EU FRA 2023 survey
Verified2335% of workers face workplace cyberbullying per CIPD 2023 report
Verified24Sextortion cases up 20% among teens in 2023 per FBI IC3
Directional2561% of bullies cyberbully anonymously per i-SAFE Foundation 2023
Single source26Online hate speech incidents rose 30% in 2023 per ISD report
Verified2744% of cyberbullying on Instagram per Thorn 2023 study
VerifiedCyberbullying and Harassment Interpretation
The internet, for all its promise of connection, has become a relentless and pervasive arena of abuse, disproportionately harming the young, the vulnerable, and anyone who dares to be visible online.
Data Breaches and Leaks
1Global data breaches cost $4.45 million average in 2023 per IBM report
Verified22,365 confirmed data breaches in US in 2023 per Identity Theft Resource Center
Verified382% of breaches involve human element per Verizon DBIR 2023
Verified4Healthcare breaches exposed 133 million records in 2023 per HHS OCR
Directional5Average time to identify breach is 204 days per IBM 2023 Cost of Data Breach
Single source683 million personal records compromised globally in Q1 2023 per Risk Based Security
Verified7MOVEit breaches affected 62 million individuals in 2023 per CISA alerts
Verified816 billion credentials leaked in 2023 compilations per Cybernews
Verified9Retail sector saw 21% of all breaches in 2023 per Verizon DBIR
Directional10Cost of breach rose 10% to $4.45M in critical infrastructure per IBM 2023
Single source111,300 data breaches reported in EU under GDPR in 2023 per ENISA
Verified12Phishing led to 16% of breaches per Verizon 2023 analysis
Verified13353 million records exposed in US breaches Jan-Jun 2023 per ITRC
Verified14Supply chain breaches up 42% in 2023 per Cyble research
Directional1595% of breaches exploitable for 5+ years per Ponemon 2023 study
Single source16Financial services average breach cost $5.9M per IBM 2023
Verified173.8 million records stolen in Uber breach 2022 impacting 2023 disclosures
Verified18Cloud misconfigs cause 20% of breaches per Palo Alto 2023 report
Verified19Insider incidents in 19% of breaches per Verizon 2023
Directional20540 million records from 23andMe breach in 2023 per company notice
Single source21Breach notification time averages 49 days post-identification per IBM 2023
Verified22Education sector breaches cost $3.87M average per IBM 2023
Verified2399% of breaches involve AWS S3 buckets per UpGuard 2023 analysis
Verified24Ransomware in 24% of healthcare breaches 2023 per HHS
Directional2510 billion records exposed in 2023 per Surfshark data breach stats
Single source26Zero-day exploits in 3% of breaches but 15% of records per Verizon 2023
VerifiedData Breaches and Leaks Interpretation
In 2023, our collective human error, sluggish response times, and misconfigured cloud buckets essentially handed cybercriminals a master key to the global vault, proving that while the technology fails impressively, we are still the most predictable and expensive vulnerability in the system.
Identity Theft and Financial Fraud
1Identity theft complaints reached 1.1 million in 2023 per FTC
Verified2$12.5 billion in fraud losses in 2023 per FTC Consumer Sentinel
Verified3465,000 credit card fraud reports in 2023 per FTC data
Verified424% increase in ID theft in 2023 per Javelin Strategy research
Directional5$5.8 billion lost to ID theft in US 2023 per FTC
Single source61 in 15 Americans victim of ID theft in 2023 per Experian
Verified7Account takeover fraud up 23% to $3.8B in 2023 per Javelin
Verified8New account fraud averaged $430 loss per case in 2023 per Javelin
Verified980% of ID theft from data breaches per AITE 2023 study
Directional10Children under 18 top ID theft victims at 29% per ITRC 2023
Single source11Crypto fraud losses $3.9B in 2023 per Chainalysis
Verified12Government imposter scams $2.6B losses 2023 per FTC
Verified13350,000 elderly ID theft victims in 2023 per AARP study
Verified14Dark web monitoring detects 15% more threats per Experian 2023
Directional1568% of ID theft via stolen mail per USPS 2023 OIG report
Single source16Investment scams caused $4.6B losses in 2023 per FTC
Verified17Biometric ID theft risks up 300% with deepfakes per ID R&D 2023
Verified181.4 million tax ID theft cases prevented in 2023 per IRS
Verified19Romance scams $1.3B losses 2023 per FTC
Directional2042% of fraudsters use stolen PII from breaches per Feedzai 2023
Single source21Average ID theft recovery time 6 months per ID Analytics 2023
Verified22E-commerce fraud $48B globally 2023 per Juniper Research
Verified23SSN misuse in 1.6M cases 2023 per FTC
Verified24Medical ID theft cost $13B in 2023 per Ponemon Institute
DirectionalIdentity Theft and Financial Fraud Interpretation
These sobering figures paint a picture of a digital gold rush for criminals, where everything from our credit cards and social security numbers to our children's identities and even our affection is being mined for billions, proving that personal data has become the most lucrative—and vulnerable—currency on the planet.
Malware and Ransomware
1Ransomware attacks grew 93% year-over-year in 2023 per Sophos State of Ransomware report
Verified266% of organizations hit by ransomware in 2023 paid the ransom per Sophos
Verified3Average ransomware recovery cost $1.54 million in 2022 per Sophos data
Verified475% of ransomware uses double extortion tactics per Coveware 2023 report
Directional5Malware infections increased 5% globally in 2023 per AV-Comparatives
Single source61 in 10 Windows computers infected with malware per Malwarebytes 2023 Labs report
Verified7Ransomware hit 236.1 million attacks in 2022 per Check Point Research
Verified8Average time to detect ransomware is 24 days per D3 Security 2023 metrics
Verified960% of SMBs fail within 6 months of ransomware attack per NIST study
Directional10Mobile malware samples reached 12.82 million in 2023 per Kaspersky
Single source11RaaS (Ransomware-as-a-Service) groups numbered 150+ in 2023 per Cyble research
Verified1271% of ransomware targets backups per Veeam 2023 report
Verified13Malware delivery via Office docs dropped to 38% in 2023 per ANY.RUN analysis
Verified14LockBit ransomware claimed 2,200 victims in 2023 per SOCRadar
Directional15Average ransomware demand $1.5 million in 2023 per Emsisoft
Single source162,200 ransomware attacks daily worldwide per Corvus Insurance 2023
Verified17Crypto-jacking malware detections up 30% in 2023 per Trend Micro
Verified1889% of malware uses obfuscation techniques per VirusTotal 2023 data
Verified19Android malware variants hit 1.4 million in Q1 2023 per ThreatFabric
Directional20Ransomware recovery without paying takes 24 days on average per Sophos 2023
Single source2143% of ransomware attacks target healthcare per Emsisoft 2023 stats
Verified22Fileless malware increased 225% in 2023 per Palo Alto Networks
Verified23Average ransomware payout $812,360 in 2023 per Coveware Q4 report
Verified2498% of orgs hit by malware in 2023 per Malwarebytes State of Malware
Directional25Conti ransomware leaked data from 1,000+ victims before shutdown per FBI 2023
Single sourceMalware and Ransomware Interpretation
While ransomware’s sordid business model—a horrifying 93% surge in attacks last year, where two-thirds of victims paid an average of nearly $2 million—proves companies are funding their own destruction, the real story is in the fine print: 75% of gangs now steal your data first, 71% deliberately target your backups, and it still takes 24 days on average to even notice you’re being bled dry.
Phishing and Social Engineering
1In 2023, phishing attacks represented 36% of all data breaches analyzed in the Verizon Data Breach Investigations Report
Verified2Globally, 83% of organizations experienced at least one successful phishing attack in 2022 according to Proofpoint's State of the Phish report
Verified3Phishing was the initial attack vector in 44% of breaches involving social engineering per Verizon DBIR 2023
Verified490% of successful cyber attacks start with a phishing email as reported by Keepnet Labs in their 2023 study
Directional5In 2022, the average phishing campaign evaded detection for 21 days according to Cofense's Phishing Threat Trends Report
Single source61.2 billion phishing emails are sent daily worldwide per Statista 2023 data
Verified774% of phishing attacks target financial institutions according to APWG Q4 2022 report
Verified8Business email compromise (BEC) phishing caused $2.9 billion in losses in 2022 per FBI IC3 report
Verified968% of organizations faced spear-phishing attacks in 2023 per KnowBe4's Phishing by Industry Benchmarking Report
Directional10Vishing (voice phishing) attacks increased by 329% in 2022 according to BlackCloak's executive cyber threat report
Single source11Smishing (SMS phishing) messages rose 328% in 2022 per Proofpoint's 2023 report
Verified1296% of credential harvesting websites use HTTPS to appear legitimate per APWG 2023 data
Verified13Phishing success rate averages 3-5% for targeted campaigns per PhishLabs 2022 analysis
Verified1422% of all breaches involved phishing as the primary factor in IBM's 2023 Cost of a Data Breach Report
Directional15QR code phishing (quishing) attacks surged 51% in 2023 per Check Point Research
Single source1685% of IT professionals report phishing as their biggest security concern per SANS Institute 2023 survey
Verified17Average click rate on phishing emails is 11.15% per 2023 Verizon DBIR
Verified181 in 99 emails sent is a phishing attempt per Barracuda Networks 2023 report
Verified19BEC scams defrauded victims of $43 million weekly in 2022 per FBI data
Directional2040% of phishing sites impersonate Microsoft per Zscaler's 2023 ThreatLabz report
Single source21Phishing training reduces click rates by 90% per Proofpoint 2023 study
Verified2262% of attacks on healthcare involved phishing per Verizon DBIR 2023 sector analysis
Verified23Mobile phishing attacks grew 161% in 2022 per Lookout's 2023 Mobile Threat Landscape report
Verified2478% of CISOs worry about AI-enhanced phishing per Gartner 2023 survey
Directional25Whaling attacks (targeting executives) increased 77% in 2023 per Abnormal Security report
Single source2651% of phishing emails bypass secure email gateways per Mimecast 2023 study
Verified27Phishing costs businesses $4.91 million on average per breach per IBM 2023
Verified28300,000 unique phishing sites detected monthly by APWG in 2023
Verified2994% of malware is delivered via phishing per 2023 AV-TEST data
Directional30GenAI phishing simulations fool 66% more users per 2023 Microsoft study
Single sourcePhishing and Social Engineering Interpretation
Every email you open is essentially a game of Russian roulette, where over a third of the bullets are phishing lures disguised as legitimate messages, and a startling number of players still seem to believe the chamber is empty.
Sources & References
- Reference 1VERIZONverizon.comVisit source
- Reference 2PROOFPOINTproofpoint.comVisit source
- Reference 3KEEPNETLABSkeepnetlabs.comVisit source
- Reference 4COFENSEcofense.comVisit source
- Reference 5STATISTAstatista.comVisit source
- Reference 6DOCSdocs.apwg.orgVisit source
- Reference 7IC3ic3.govVisit source
- Reference 8KNOWBE4knowbe4.comVisit source
- Reference 9BLACKCLOAKblackcloak.ioVisit source
- Reference 10PHISHLABSphishlabs.comVisit source
- Reference 11IBMibm.comVisit source
- Reference 12RESEARCHresearch.checkpoint.comVisit source
- Reference 13SANSsans.orgVisit source
- Reference 14BARRACUDAbarracuda.comVisit source
- Reference 15ZSCALERzscaler.comVisit source
- Reference 16LOOKOUTlookout.comVisit source
- Reference 17GARTNERgartner.comVisit source
- Reference 18ABNORMALSECURITYabnormalsecurity.comVisit source
- Reference 19MIMECASTmimecast.comVisit source
- Reference 20APWGapwg.orgVisit source
- Reference 21AV-TESTav-test.orgVisit source
- Reference 22MICROSOFTmicrosoft.comVisit source
- Reference 23SOPHOSsophos.comVisit source
- Reference 24COVEWAREcoveware.comVisit source
- Reference 25AV-COMPARATIVESav-comparatives.orgVisit source
- Reference 26MALWAREBYTESmalwarebytes.comVisit source
- Reference 27D3SECURITYd3security.comVisit source
- Reference 28NVLPUBSnvlpubs.nist.govVisit source
- Reference 29SECURELISTsecurelist.comVisit source
- Reference 30CYBLEcyble.comVisit source
- Reference 31VEEAMveeam.comVisit source
- Reference 32ANYany.runVisit source
- Reference 33SOCRADARsocradar.ioVisit source
- Reference 34EMSISOFTemsisoft.comVisit source
- Reference 35CORVUSINSURANCEcorvusinsurance.comVisit source
- Reference 36TRENDMICROtrendmicro.comVisit source
- Reference 37BLOGblog.virustotal.comVisit source
- Reference 38THREATFABRICthreatfabric.comVisit source
- Reference 39UNIT42unit42.paloaltonetworks.comVisit source
- Reference 40IDTHEFTCENTERidtheftcenter.orgVisit source
- Reference 41HHShhs.govVisit source
- Reference 42RISKBASEDSECURITYriskbasedsecurity.comVisit source
- Reference 43CISAcisa.govVisit source
- Reference 44CYBERNEWScybernews.comVisit source
- Reference 45ENISAenisa.europa.euVisit source
- Reference 46PONEMONponemon.orgVisit source
- Reference 47UBERuber.comVisit source
- Reference 48BLOGblog.23andme.comVisit source
- Reference 49UPGUARDupguard.comVisit source
- Reference 50SURFSHARKsurfshark.comVisit source
- Reference 51PEWRESEARCHpewresearch.orgVisit source
- Reference 52CYBERBULLYINGcyberbullying.orgVisit source
- Reference 53ADLadl.orgVisit source
- Reference 54ENEAenea.comVisit source
- Reference 55UNICEFunicef.orgVisit source
- Reference 56GLSENglsen.orgVisit source
- Reference 57FBIfbi.govVisit source
- Reference 58NEAnea.orgVisit source
- Reference 59JAMANETWORKjamanetwork.comVisit source
- Reference 60CYBERCIVILRIGHTScybercivilrights.orgVisit source
- Reference 61STOPBULLYINGstopbullying.govVisit source
- Reference 62NEWZOOnewzoo.comVisit source
- Reference 63COUNTERHATEcounterhate.comVisit source
- Reference 64NCESnces.ed.govVisit source
- Reference 65DITCHTHELABELditchthelabel.orgVisit source
- Reference 66STREAMLABSstreamlabs.comVisit source
- Reference 67TODAYtoday.yougov.comVisit source
- Reference 68FRAfra.europa.euVisit source
- Reference 69CIPDcipd.orgVisit source
- Reference 70ISAFEisafe.orgVisit source
- Reference 71ISDGLOBALisdglobal.orgVisit source
- Reference 72THORNthorn.orgVisit source
- Reference 73FTCftc.govVisit source
- Reference 74JAVELINSTRATEGYjavelinstrategy.comVisit source
- Reference 75CONSUMERconsumer.ftc.govVisit source
- Reference 76EXPERIANexperian.comVisit source
- Reference 77AITEGROUPaitegroup.comVisit source
- Reference 78CHAINALYSISchainalysis.comVisit source
- Reference 79AARPaarp.orgVisit source
- Reference 80USPSOIGuspsoig.govVisit source
- Reference 81IDRNDidrnd.aiVisit source
- Reference 82IRSirs.govVisit source
- Reference 83FEEDZAIfeedzai.comVisit source
- Reference 84IDANALYTICSidanalytics.comVisit source
- Reference 85JUNIPERRESEARCHjuniperresearch.comVisit source