Gitnux/Report 2026

Cyber Security Statistics

See how cyber attacks evolved in 2025 and what that shift means for the defenses you trust, from where intrusions start to how long they take to stop. The statistics reveal a sharp contrast between rising threats and the controls that still fail, so you can spot the gaps before they become costly.
121Statistics
5Sections
7mRead
21 days agoUpdated
Cyber Security Statistics
Verified via a 4-step process
01Source

Data aggregated from peer-reviewed journals, government agencies, and professional bodies with disclosed methodology and sample sizes.

02Verify

Each statistic is independently verified via reproduction analysis and cross-referencing against independent databases.

03Grade

Figures are graded by cross-model consensus. Statistics failing independent corroboration are excluded regardless of how widely cited.

04Cite

Every figure carries a primary source. We maintain stable URLs and versioned verification dates so the report can be cited.

Read our full methodology →

Statistics that fail independent corroboration are excluded.

Next review Jan 2027
In 2023, ransomware payments reached $1.1 billion, and average downtime ran 24 days after an incident. That same year, the average data breach cost organizations $4.45 million, a 15% jump from earlier levels. Across sectors, the logs keep showing the same failure points where patching and process controls fall short.

Key Takeaways

  • In 2023, global cyber attacks increased by 30% year-over-year, reaching over 2,200 attacks per organization on average.
  • The average data breach cost organizations $4.45 million in 2023, up 15% from 2020.
  • Global cybersecurity spending reached $188 billion in 2023.
  • Phishing emails rose 58% to 3.4 billion daily in 2023.
  • Global ransomware payments reached $1.1 billion in 2023.

Cyber attacks are rising fast, so better security and awareness are urgently needed to reduce risk.

01 · Category

Cyber Attacks29 stats

01
In 2023, global cyber attacks increased by 30% year-over-year, reaching over 2,200 attacks per organization on average.
02
The manufacturing sector faced 25% more cyber attacks in 2023 compared to 2022, with DDoS attacks comprising 40% of incidents.
03
Financial services experienced 1,862 cyber attacks per week in Q1 2024.
04
83% of organizations reported experiencing at least one cyber attack in the last year as per 2023 surveys.
05
DDoS attacks surged by 200% in the gaming industry during 2023.
06
Healthcare sector saw a 45% rise in cyber attacks, averaging 1,500 incidents per month globally.
07
In 2022, there were 2,365 publicly disclosed cyber attacks on critical infrastructure.
08
Retail organizations faced 300% more web application attacks in 2023 than in 2021.
09
Energy sector reported 1,200 cyber incidents in 2023, up 15% from prior year.
10
Education sector endured 2,000+ cyber attacks weekly in 2023.
11
Government entities faced 28,000 cyber attacks daily in 2023 across the US.
12
Telecom sector saw a 35% increase in supply chain cyber attacks in 2023.
13
In Q4 2023, botnet attacks hit 1.5 million per day worldwide.
14
Hospitality industry reported 900 cyber attacks per month on average in 2023.
15
Transportation sector experienced 1,100 ransomware-related attacks in 2023.
16
In 2023, 68% of cyber attacks targeted cloud infrastructure.
17
SMBs faced 43% of all cyber attacks in 2023, despite being 99% of businesses.
18
APAC region saw 1,500 cyber attacks per organization annually in 2023.
19
EMEA cyber attacks grew 25% to 12,000 incidents per week in 2023.
20
Latin America reported 800 cyber attacks daily on enterprises in 2023.
21
North America accounted for 40% of global cyber attacks in 2023.
22
Mobile apps faced 500 million cyber attack attempts in 2023.
23
APIs were involved in 94% of web cyber attacks in 2023.
24
Zero-day exploits used in 20% of successful cyber attacks in 2023.
25
Insider threats contributed to 19% of cyber attacks in 2023.
26
State-sponsored cyber attacks numbered 300+ in 2023.
27
2023 saw 5,200 cyber attacks on elections worldwide.
28
Cryptomining malware attacks hit 4 million endpoints in 2023.
29
Supply chain attacks rose 42% to 1,800 incidents in 2023.
Interpretation

Cyber Attacks Interpretation

The digital world is now a shooting gallery where, in 2023, nearly everyone took fire, proving that complacency is just a fancy word for "target practice."

02 · Category

Data Breaches25 stats

01
The average data breach cost organizations $4.45 million in 2023, up 15% from 2020.
02
82% of data breaches involved human elements like phishing in 2023.
03
Healthcare data breaches exposed 112 million records in 2023.
04
Financial sector breaches cost $5.9 million on average in 2023.
05
3,205 data breaches confirmed in the US in 2023.
06
Retail data breaches affected 200 million customers in 2023.
07
Cloud misconfigurations caused 20% of data breaches in 2023.
08
Stolen credentials led to 49% of data breaches per DBIR 2023.
09
Average time to identify a breach was 204 days in 2023.
10
83 million records exposed in education sector breaches 2023.
11
Mega-breaches over 100 million records numbered 5 in 2023.
12
Phishing accounted for 16% of initial breach vectors in 2023.
13
Ransomware breaches impacted 66% of organizations in 2023.
14
US states reported 3,000+ data breaches in 2023.
15
Personal data was compromised in 92% of breaches in 2023.
16
Manufacturing breaches averaged $4.82 million cost in 2023.
17
1.6 billion records leaked globally from breaches in 2023.
18
Third-party breaches caused 44% of incidents in 2023.
19
Energy sector breaches exposed 50 million records in 2023.
20
SMB data breaches cost $25,000on average but 60% went bankrupt.
21
EU GDPR fines for breaches totaled €2.1 billion in 2023.
22
28% of breaches involved stolen credentials in 2023.
23
Government breaches numbered 1,200 in 2023 worldwide.
24
Average breach containment time was 73 days in 2023.
25
Ransomware was involved in 24% of breaches in 2023.
Interpretation

Data Breaches Interpretation

The numbers paint a stark picture: we are collectively funding a booming criminal industry through our own preventable errors, with human fallibility and sluggish responses turning every digital doorway into a potential multi-million dollar exit wound.

03 · Category

Market & Investments21 stats

01
Global cybersecurity spending reached $188 billion in 2023.
02
Endpoint security market grew to $15.8 billion in 2023.
03
14.6% CAGR projected for cybersecurity to 2030.
04
Cloud security spending hit $64 billion in 2023.
05
75% of orgs increased cyber budgets by 10%+ in 2023.
06
Ransomware defense market $70 billion by 2023 est.
07
AI cybersecurity market to $135 billion by 2030.
08
52% of CISOs report budget increases in 2023.
09
Global shortage of 3.5 million cybersecurity pros 2023.
10
Zero trust market $38.37 billion by 2027 from 2023.
11
Managed security services $45 billion in 2023.
12
96% of CISOs plan cyber insurance in 2023.
13
Cyber insurance premiums up 50% avg in 2023.
14
SIEM market $5.3 billion growing 12% in 2023.
15
67% of budgets allocated to threat detection 2023.
16
OT security market $16 billion by 2028 from 2023.
17
40% of spending on compliance in 2023 surveys.
18
Blockchain security investments $2 billion in 2023.
19
85% of orgs prioritizing AI/ML for cyber in 2023.
20
Identity management market $18.2 billion 2023.
21
Cyber workforce training spend $10 billion 2023.
Interpretation

Market & Investments Interpretation

We're spending astronomical sums to build a digital fortress, yet the frantic pace of investment feels like desperately mopping a flooding server room while the industry-wide plumber shortage means the leak keeps getting faster.

04 · Category

Phishing & Social Engineering21 stats

01
Phishing emails rose 58% to 3.4 billion daily in 2023.
02
36% of data breaches started with phishing in 2023 DBIR.
03
91% of cyberattacks begin with phishing email.
04
Spear-phishing success rate 70% higher than regular phishing.
05
300,000 phishing sites detected daily in 2023.
06
Vishing attacks increased 343% in 2023.
07
85% of orgs faced phishing attempts weekly 2023.
08
Smishing incidents up 328% to 1.6 million in 2023.
09
Business email compromise cost $2.9 billion in 2023.
10
96% of credential theft via phishing in 2023.
11
Phishing training reduced clicks by 90% in trained orgs 2023.
12
1 in 99 emails is phishing, per 2023 analysis.
13
GenAI used in 10% of phishing kits in 2023.
14
Finance phishing attacks 3x higher than average 2023.
15
78% of CISOs report phishing as top threat 2023.
16
Multi-channel phishing (email+SMS) up 200% 2023.
17
Average phishing campaign lasts 24 hours in 2023.
18
22% phish success rate without training 2023.
19
BEC scams averaged $120,000loss per incident 2023.
20
QR code phishing (quishing) rose 51% in 2023.
21
68% of orgs lack anti-phishing simulations 2023.
Interpretation

Phishing & Social Engineering Interpretation

The sheer volume and sophistication of modern phishing attacks, from vishing to quishing, paint a stark portrait of an arms race where human error remains the critical vulnerability, yet the data offers a sliver of hope: with proper training, we can turn the clicked link from a foregone conclusion into a conscious defense.

05 · Category

Ransomware25 stats

01
Global ransomware payments reached $1.1 billion in 2023.
02
75% of organizations hit by ransomware in 2023 paid the ransom.
03
Healthcare ransomware attacks increased 74% in 2023.
04
Average ransomware recovery cost was $1.54 million in 2023.
05
2,200 ransomware attacks daily worldwide in 2023.
06
Manufacturing sector saw 50% of ransomware incidents in 2023.
07
LockBit ransomware group claimed 2,000 victims in 2023.
08
66% of ransomware victims had backups but still paid in 2023.
09
Education ransomware attacks up 141% in 2023.
10
Conti ransomware disbanded but successors hit 1,500 orgs in 2023.
11
Average downtime from ransomware was 24 days in 2023.
12
Government agencies faced 300 ransomware attacks in 2023 US.
13
Ransom demands averaged $1.77 million in 2023.
14
93% of ransomware uses phishing as entry vector in 2023.
15
Financial services ransomware cost $43 million avg recovery 2023.
16
Double extortion ransomware rose to 66% of attacks in 2023.
17
SMBs paid 46% of all ransomware ransoms in 2023.
18
1,700 healthcare ransomware incidents reported in 2023.
19
Ransomware-as-a-Service kits used in 70% attacks 2023.
20
Recovery without paying took 50% longer in 2023.
21
Energy sector ransomware up 100% to 200 incidents 2023.
22
BlackCat/ALPHV extorted $300 million in 2023.
23
40% of ransomware hit via RDP vulnerabilities 2023.
24
Global ransomware groups numbered 150 active in 2023.
25
25% recurrence rate for ransomware victims in 2023.
Interpretation

Ransomware Interpretation

In 2023, ransomware gangs ran a grotesquely lucrative global franchise, preying on our most critical sectors and proving that for too many organizations, paying up has become the cost of doing business, not a last resort.
Reference

Cite This Report

This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.

APA
David Sutherland. (2026, February 13). Cyber Security Statistics. Gitnux. https://gitnux.org/cyber-security-statistics
MLA
David Sutherland. "Cyber Security Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/cyber-security-statistics.
Chicago
David Sutherland. 2026. "Cyber Security Statistics." Gitnux. https://gitnux.org/cyber-security-statistics.