While one simple click on a deceptive email is all it takes, the staggering reality is that 90% of successful cyberattacks begin with a phishing attempt, making it the single greatest threat to our digital safety today.
Key Takeaways
- In 2023, phishing attacks represented 36% of all data breaches analyzed in the Verizon Data Breach Investigations Report
- Globally, 83% of organizations experienced at least one successful phishing attack in 2022 according to Proofpoint's State of the Phish report
- Phishing was the initial attack vector in 44% of breaches involving social engineering per Verizon DBIR 2023
- Ransomware attacks grew 93% year-over-year in 2023 per Sophos State of Ransomware report
- 66% of organizations hit by ransomware in 2023 paid the ransom per Sophos
- Average ransomware recovery cost $1.54 million in 2022 per Sophos data
- Global data breaches cost $4.45 million average in 2023 per IBM report
- 2,365 confirmed data breaches in US in 2023 per Identity Theft Resource Center
- 82% of breaches involve human element per Verizon DBIR 2023
- 42% of internet users experienced online harassment in 2023 per Pew Research
- 41% of Americans faced cyberbullying in 2022 per Statista survey
- 59% of US teens experienced cyberbullying per Pew 2022 Teens and Cyberbullying
- Identity theft complaints reached 1.1 million in 2023 per FTC
- $12.5 billion in fraud losses in 2023 per FTC Consumer Sentinel
- 465,000 credit card fraud reports in 2023 per FTC data
Phishing remains the leading cause of devastating cyberattacks and data breaches globally.
Cyberbullying and Harassment
- 42% of internet users experienced online harassment in 2023 per Pew Research
- 41% of Americans faced cyberbullying in 2022 per Statista survey
- 59% of US teens experienced cyberbullying per Pew 2022 Teens and Cyberbullying
- 37% of youth aged 12-17 faced online harassment in 2023 per Cyberbullying Research Center
- Women are 27% more likely to experience severe harassment online per Pew 2021 data updated 2023
- 64% of gamers report harassment in online games per ADL 2023 report
- Doxxing incidents rose 50% in 2023 per Enea report on online abuse
- 1 in 3 children experience cyberbullying by age 12 per UNICEF 2023 study
- 46% of LGBTQ+ youth faced online harassment per GLSEN 2023 survey
- Swatting calls increased 500% targeting schools in 2023 per FBI
- 72% of teachers witnessed cyberbullying among students per NEA 2023 survey
- Online harassment leads to 20% increase in teen suicide ideation per JAMA 2023 study
- 28% of adults experienced severe harassment forms like stalking per Pew 2023
- Revenge porn reports up 33% in 2023 per Cyber Civil Rights Initiative
- 55% of cyberbullying victims experience mental health issues per StopBullying.gov 2023
- Gaming platforms see 1 in 5 users harassed daily per Newzoo 2023 report
- 67% of harassment on Twitter/X is political per CCDH 2023 study
- School cyberbullying reports doubled since 2020 per NCES 2023 data
- 81% of children keep cyberbullying secret from parents per Ditch the Label 2023
- Female streamers face 3x more harassment than males per Streamlabs 2023
- 49% of online harassment targets appearance per YouGov 2023 poll
- Cyberstalking affects 16% of internet users per EU FRA 2023 survey
- 35% of workers face workplace cyberbullying per CIPD 2023 report
- Sextortion cases up 20% among teens in 2023 per FBI IC3
- 61% of bullies cyberbully anonymously per i-SAFE Foundation 2023
- Online hate speech incidents rose 30% in 2023 per ISD report
- 44% of cyberbullying on Instagram per Thorn 2023 study
Cyberbullying and Harassment Interpretation
The internet, for all its promise of connection, has become a relentless and pervasive arena of abuse, disproportionately harming the young, the vulnerable, and anyone who dares to be visible online.
Data Breaches and Leaks
- Global data breaches cost $4.45 million average in 2023 per IBM report
- 2,365 confirmed data breaches in US in 2023 per Identity Theft Resource Center
- 82% of breaches involve human element per Verizon DBIR 2023
- Healthcare breaches exposed 133 million records in 2023 per HHS OCR
- Average time to identify breach is 204 days per IBM 2023 Cost of Data Breach
- 83 million personal records compromised globally in Q1 2023 per Risk Based Security
- MOVEit breaches affected 62 million individuals in 2023 per CISA alerts
- 16 billion credentials leaked in 2023 compilations per Cybernews
- Retail sector saw 21% of all breaches in 2023 per Verizon DBIR
- Cost of breach rose 10% to $4.45M in critical infrastructure per IBM 2023
- 1,300 data breaches reported in EU under GDPR in 2023 per ENISA
- Phishing led to 16% of breaches per Verizon 2023 analysis
- 353 million records exposed in US breaches Jan-Jun 2023 per ITRC
- Supply chain breaches up 42% in 2023 per Cyble research
- 95% of breaches exploitable for 5+ years per Ponemon 2023 study
- Financial services average breach cost $5.9M per IBM 2023
- 3.8 million records stolen in Uber breach 2022 impacting 2023 disclosures
- Cloud misconfigs cause 20% of breaches per Palo Alto 2023 report
- Insider incidents in 19% of breaches per Verizon 2023
- 540 million records from 23andMe breach in 2023 per company notice
- Breach notification time averages 49 days post-identification per IBM 2023
- Education sector breaches cost $3.87M average per IBM 2023
- 99% of breaches involve AWS S3 buckets per UpGuard 2023 analysis
- Ransomware in 24% of healthcare breaches 2023 per HHS
- 10 billion records exposed in 2023 per Surfshark data breach stats
- Zero-day exploits in 3% of breaches but 15% of records per Verizon 2023
Data Breaches and Leaks Interpretation
In 2023, our collective human error, sluggish response times, and misconfigured cloud buckets essentially handed cybercriminals a master key to the global vault, proving that while the technology fails impressively, we are still the most predictable and expensive vulnerability in the system.
Identity Theft and Financial Fraud
- Identity theft complaints reached 1.1 million in 2023 per FTC
- $12.5 billion in fraud losses in 2023 per FTC Consumer Sentinel
- 465,000 credit card fraud reports in 2023 per FTC data
- 24% increase in ID theft in 2023 per Javelin Strategy research
- $5.8 billion lost to ID theft in US 2023 per FTC
- 1 in 15 Americans victim of ID theft in 2023 per Experian
- Account takeover fraud up 23% to $3.8B in 2023 per Javelin
- New account fraud averaged $430 loss per case in 2023 per Javelin
- 80% of ID theft from data breaches per AITE 2023 study
- Children under 18 top ID theft victims at 29% per ITRC 2023
- Crypto fraud losses $3.9B in 2023 per Chainalysis
- Government imposter scams $2.6B losses 2023 per FTC
- 350,000 elderly ID theft victims in 2023 per AARP study
- Dark web monitoring detects 15% more threats per Experian 2023
- 68% of ID theft via stolen mail per USPS 2023 OIG report
- Investment scams caused $4.6B losses in 2023 per FTC
- Biometric ID theft risks up 300% with deepfakes per ID R&D 2023
- 1.4 million tax ID theft cases prevented in 2023 per IRS
- Romance scams $1.3B losses 2023 per FTC
- 42% of fraudsters use stolen PII from breaches per Feedzai 2023
- Average ID theft recovery time 6 months per ID Analytics 2023
- E-commerce fraud $48B globally 2023 per Juniper Research
- SSN misuse in 1.6M cases 2023 per FTC
- Medical ID theft cost $13B in 2023 per Ponemon Institute
Identity Theft and Financial Fraud Interpretation
These sobering figures paint a picture of a digital gold rush for criminals, where everything from our credit cards and social security numbers to our children's identities and even our affection is being mined for billions, proving that personal data has become the most lucrative—and vulnerable—currency on the planet.
Malware and Ransomware
- Ransomware attacks grew 93% year-over-year in 2023 per Sophos State of Ransomware report
- 66% of organizations hit by ransomware in 2023 paid the ransom per Sophos
- Average ransomware recovery cost $1.54 million in 2022 per Sophos data
- 75% of ransomware uses double extortion tactics per Coveware 2023 report
- Malware infections increased 5% globally in 2023 per AV-Comparatives
- 1 in 10 Windows computers infected with malware per Malwarebytes 2023 Labs report
- Ransomware hit 236.1 million attacks in 2022 per Check Point Research
- Average time to detect ransomware is 24 days per D3 Security 2023 metrics
- 60% of SMBs fail within 6 months of ransomware attack per NIST study
- Mobile malware samples reached 12.82 million in 2023 per Kaspersky
- RaaS (Ransomware-as-a-Service) groups numbered 150+ in 2023 per Cyble research
- 71% of ransomware targets backups per Veeam 2023 report
- Malware delivery via Office docs dropped to 38% in 2023 per ANY.RUN analysis
- LockBit ransomware claimed 2,200 victims in 2023 per SOCRadar
- Average ransomware demand $1.5 million in 2023 per Emsisoft
- 2,200 ransomware attacks daily worldwide per Corvus Insurance 2023
- Crypto-jacking malware detections up 30% in 2023 per Trend Micro
- 89% of malware uses obfuscation techniques per VirusTotal 2023 data
- Android malware variants hit 1.4 million in Q1 2023 per ThreatFabric
- Ransomware recovery without paying takes 24 days on average per Sophos 2023
- 43% of ransomware attacks target healthcare per Emsisoft 2023 stats
- Fileless malware increased 225% in 2023 per Palo Alto Networks
- Average ransomware payout $812,360 in 2023 per Coveware Q4 report
- 98% of orgs hit by malware in 2023 per Malwarebytes State of Malware
- Conti ransomware leaked data from 1,000+ victims before shutdown per FBI 2023
Malware and Ransomware Interpretation
While ransomware’s sordid business model—a horrifying 93% surge in attacks last year, where two-thirds of victims paid an average of nearly $2 million—proves companies are funding their own destruction, the real story is in the fine print: 75% of gangs now steal your data first, 71% deliberately target your backups, and it still takes 24 days on average to even notice you’re being bled dry.
Phishing and Social Engineering
- In 2023, phishing attacks represented 36% of all data breaches analyzed in the Verizon Data Breach Investigations Report
- Globally, 83% of organizations experienced at least one successful phishing attack in 2022 according to Proofpoint's State of the Phish report
- Phishing was the initial attack vector in 44% of breaches involving social engineering per Verizon DBIR 2023
- 90% of successful cyber attacks start with a phishing email as reported by Keepnet Labs in their 2023 study
- In 2022, the average phishing campaign evaded detection for 21 days according to Cofense's Phishing Threat Trends Report
- 1.2 billion phishing emails are sent daily worldwide per Statista 2023 data
- 74% of phishing attacks target financial institutions according to APWG Q4 2022 report
- Business email compromise (BEC) phishing caused $2.9 billion in losses in 2022 per FBI IC3 report
- 68% of organizations faced spear-phishing attacks in 2023 per KnowBe4's Phishing by Industry Benchmarking Report
- Vishing (voice phishing) attacks increased by 329% in 2022 according to BlackCloak's executive cyber threat report
- Smishing (SMS phishing) messages rose 328% in 2022 per Proofpoint's 2023 report
- 96% of credential harvesting websites use HTTPS to appear legitimate per APWG 2023 data
- Phishing success rate averages 3-5% for targeted campaigns per PhishLabs 2022 analysis
- 22% of all breaches involved phishing as the primary factor in IBM's 2023 Cost of a Data Breach Report
- QR code phishing (quishing) attacks surged 51% in 2023 per Check Point Research
- 85% of IT professionals report phishing as their biggest security concern per SANS Institute 2023 survey
- Average click rate on phishing emails is 11.15% per 2023 Verizon DBIR
- 1 in 99 emails sent is a phishing attempt per Barracuda Networks 2023 report
- BEC scams defrauded victims of $43 million weekly in 2022 per FBI data
- 40% of phishing sites impersonate Microsoft per Zscaler's 2023 ThreatLabz report
- Phishing training reduces click rates by 90% per Proofpoint 2023 study
- 62% of attacks on healthcare involved phishing per Verizon DBIR 2023 sector analysis
- Mobile phishing attacks grew 161% in 2022 per Lookout's 2023 Mobile Threat Landscape report
- 78% of CISOs worry about AI-enhanced phishing per Gartner 2023 survey
- Whaling attacks (targeting executives) increased 77% in 2023 per Abnormal Security report
- 51% of phishing emails bypass secure email gateways per Mimecast 2023 study
- Phishing costs businesses $4.91 million on average per breach per IBM 2023
- 300,000 unique phishing sites detected monthly by APWG in 2023
- 94% of malware is delivered via phishing per 2023 AV-TEST data
- GenAI phishing simulations fool 66% more users per 2023 Microsoft study
Phishing and Social Engineering Interpretation
Every email you open is essentially a game of Russian roulette, where over a third of the bullets are phishing lures disguised as legitimate messages, and a startling number of players still seem to believe the chamber is empty.
Sources & References
- Reference 1VERIZONverizon.comVisit source
- Reference 2PROOFPOINTproofpoint.comVisit source
- Reference 3KEEPNETLABSkeepnetlabs.comVisit source
- Reference 4COFENSEcofense.comVisit source
- Reference 5STATISTAstatista.comVisit source
- Reference 6DOCSdocs.apwg.orgVisit source
- Reference 7IC3ic3.govVisit source
- Reference 8KNOWBE4knowbe4.comVisit source
- Reference 9BLACKCLOAKblackcloak.ioVisit source
- Reference 10PHISHLABSphishlabs.comVisit source
- Reference 11IBMibm.comVisit source
- Reference 12RESEARCHresearch.checkpoint.comVisit source
- Reference 13SANSsans.orgVisit source
- Reference 14BARRACUDAbarracuda.comVisit source
- Reference 15ZSCALERzscaler.comVisit source
- Reference 16LOOKOUTlookout.comVisit source
- Reference 17GARTNERgartner.comVisit source
- Reference 18ABNORMALSECURITYabnormalsecurity.comVisit source
- Reference 19MIMECASTmimecast.comVisit source
- Reference 20APWGapwg.orgVisit source
- Reference 21AV-TESTav-test.orgVisit source
- Reference 22MICROSOFTmicrosoft.comVisit source
- Reference 23SOPHOSsophos.comVisit source
- Reference 24COVEWAREcoveware.comVisit source
- Reference 25AV-COMPARATIVESav-comparatives.orgVisit source
- Reference 26MALWAREBYTESmalwarebytes.comVisit source
- Reference 27D3SECURITYd3security.comVisit source
- Reference 28NVLPUBSnvlpubs.nist.govVisit source
- Reference 29SECURELISTsecurelist.comVisit source
- Reference 30CYBLEcyble.comVisit source
- Reference 31VEEAMveeam.comVisit source
- Reference 32ANYany.runVisit source
- Reference 33SOCRADARsocradar.ioVisit source
- Reference 34EMSISOFTemsisoft.comVisit source
- Reference 35CORVUSINSURANCEcorvusinsurance.comVisit source
- Reference 36TRENDMICROtrendmicro.comVisit source
- Reference 37BLOGblog.virustotal.comVisit source
- Reference 38THREATFABRICthreatfabric.comVisit source
- Reference 39UNIT42unit42.paloaltonetworks.comVisit source
- Reference 40IDTHEFTCENTERidtheftcenter.orgVisit source
- Reference 41HHShhs.govVisit source
- Reference 42RISKBASEDSECURITYriskbasedsecurity.comVisit source
- Reference 43CISAcisa.govVisit source
- Reference 44CYBERNEWScybernews.comVisit source
- Reference 45ENISAenisa.europa.euVisit source
- Reference 46PONEMONponemon.orgVisit source
- Reference 47UBERuber.comVisit source
- Reference 48BLOGblog.23andme.comVisit source
- Reference 49UPGUARDupguard.comVisit source
- Reference 50SURFSHARKsurfshark.comVisit source
- Reference 51PEWRESEARCHpewresearch.orgVisit source
- Reference 52CYBERBULLYINGcyberbullying.orgVisit source
- Reference 53ADLadl.orgVisit source
- Reference 54ENEAenea.comVisit source
- Reference 55UNICEFunicef.orgVisit source
- Reference 56GLSENglsen.orgVisit source
- Reference 57FBIfbi.govVisit source
- Reference 58NEAnea.orgVisit source
- Reference 59JAMANETWORKjamanetwork.comVisit source
- Reference 60CYBERCIVILRIGHTScybercivilrights.orgVisit source
- Reference 61STOPBULLYINGstopbullying.govVisit source
- Reference 62NEWZOOnewzoo.comVisit source
- Reference 63COUNTERHATEcounterhate.comVisit source
- Reference 64NCESnces.ed.govVisit source
- Reference 65DITCHTHELABELditchthelabel.orgVisit source
- Reference 66STREAMLABSstreamlabs.comVisit source
- Reference 67TODAYtoday.yougov.comVisit source
- Reference 68FRAfra.europa.euVisit source
- Reference 69CIPDcipd.orgVisit source
- Reference 70ISAFEisafe.orgVisit source
- Reference 71ISDGLOBALisdglobal.orgVisit source
- Reference 72THORNthorn.orgVisit source
- Reference 73FTCftc.govVisit source
- Reference 74JAVELINSTRATEGYjavelinstrategy.comVisit source
- Reference 75CONSUMERconsumer.ftc.govVisit source
- Reference 76EXPERIANexperian.comVisit source
- Reference 77AITEGROUPaitegroup.comVisit source
- Reference 78CHAINALYSISchainalysis.comVisit source
- Reference 79AARPaarp.orgVisit source
- Reference 80USPSOIGuspsoig.govVisit source
- Reference 81IDRNDidrnd.aiVisit source
- Reference 82IRSirs.govVisit source
- Reference 83FEEDZAIfeedzai.comVisit source
- Reference 84IDANALYTICSidanalytics.comVisit source
- Reference 85JUNIPERRESEARCHjuniperresearch.comVisit source