Cyber losses and security spending are moving fast, but the contrast is what really stands out. For example, the global security orchestration automation and response market is projected to reach $5.0 billion by 2028 while the average attacker dwell time is still 11 days. From phishing driven breaches to zero trust growth to $107.2 billion by 2029, these statistics map how threats and defenses are scaling at very different speeds.
Key Takeaways
- The global managed security services market is forecast to grow to $55.3 billion by 2029
- The global cloud security market size is forecast to reach $105.2 billion by 2032
- The global endpoint security market is projected to reach $26.1 billion by 2028
- Organizations with more than 10,000 employees had an average data breach cost of $5.1 million in 2023 (IBM 2023 Cost of a Data Breach report)
- A median of 20.8 days is reported for the time to recover from ransomware incidents (global survey, 2024)
- The mean ransom payment for ransomware incidents was $200,000 in 2023 (Chainalysis crypto crime report for ransomware payments)
- In the Verizon DBIR 2024, 18% of breaches were caused by phishing
- Microsoft Defender blocked 2.5 billion malware samples in 2023 (Microsoft Digital Defense Report 2024)
- 92% of respondents said they believe AI will increase cybersecurity threats
- In the UK, 28% of individuals reported having seen a phishing scam in the last year (2024 UK Ofcom consumer survey)
- The average financial loss per ransomware incident reported to the FBI exceeded $50,000 in 2023 (IC3 annual report ransomware section)
- 2.7% of global internet users were affected by a breach impacting accounts during 2023, per Risk Based Security's annual breach analysis
- The average dwell time for attackers was 11 days in 2023 (median time from compromise to detection) according to Mandiant’s dwell-time analysis
- The number of disclosed vulnerabilities reached 25,000 in 2023 (annual CVE counting reported by the MITRE CVE program)
- 90% of organizations reported using multi-factor authentication (MFA) for at least some users (survey finding, 2024)
Cybersecurity spending and cyber risk are both rising fast, with major market growth and costly breaches driven by phishing.
Related reading
Market Size
1The global managed security services market is forecast to grow to $55.3 billion by 2029[1]
Directional
2The global cloud security market size is forecast to reach $105.2 billion by 2032[2]
Verified
3The global endpoint security market is projected to reach $26.1 billion by 2028[3]
Verified
4The global security orchestration automation and response (SOAR) market is projected to reach $5.0 billion by 2028[4]
Single source
5The global zero trust security market is expected to grow from $21.8 billion in 2023 to $107.2 billion by 2029[5]
Directional
6The global cyber insurance market is projected to reach $31.1 billion by 2030[6]
Verified
7The global SIEM market is forecast to reach $11.7 billion by 2027[7]
Directional
8The global intrusion detection system (IDS) market is expected to reach $17.7 billion by 2030[8]
Verified
9$5.3 billion in VC funding for cybersecurity startups was reported globally in 2023 (PitchBook annual cybersecurity funding)[9]
Single source
10$1.4 billion was the annual global spend on security awareness training platforms in 2023 (industry estimate)[10]
Directional
11$14.2 billion was the global market size for managed detection and response (MDR) in 2023 (market estimate)[11]
Verified
1235% of IT and security executives planned to increase budgets for cloud security in 2025 (survey, 2024)[12]
Directional
Market Size Interpretation
For the market size category, cybersecurity spend and capability are set to scale rapidly with major segments surging from $14.2 billion in 2023 MDR to $31.1 billion cyber insurance by 2030 and a zero trust market forecast to jump from $21.8 billion in 2023 to $107.2 billion by 2029, signaling sustained, broad-based growth across key security offerings.
More related reading
Cost Analysis
1Organizations with more than 10,000 employees had an average data breach cost of $5.1 million in 2023 (IBM 2023 Cost of a Data Breach report)[13]
Verified
2A median of 20.8 days is reported for the time to recover from ransomware incidents (global survey, 2024)[14]
Verified
3The mean ransom payment for ransomware incidents was $200,000 in 2023 (Chainalysis crypto crime report for ransomware payments)[15]
Verified
Cost Analysis Interpretation
From a cost analysis perspective, large organizations with more than 10,000 employees faced an average breach cost of $5.1 million in 2023, while ransomware incidents still take a median of 20.8 days to recover and commonly involve a mean ransom payment of $200,000, showing how quickly expenses can stack up across the full incident timeline.
Performance Metrics
1In the Verizon DBIR 2024, 18% of breaches were caused by phishing[16]
Single source
2Microsoft Defender blocked 2.5 billion malware samples in 2023 (Microsoft Digital Defense Report 2024)[17]
Verified
Performance Metrics Interpretation
Under performance metrics, phishing drove 18% of breaches in Verizon DBIR 2024 while defenses scaled to block 2.5 billion malware samples in 2023, highlighting that measurable detection and blocking capacity are crucial even as this specific threat vector remains a major breach contributor.
More related reading
Industry Trends
192% of respondents said they believe AI will increase cybersecurity threats[18]
Directional
2In the UK, 28% of individuals reported having seen a phishing scam in the last year (2024 UK Ofcom consumer survey)[19]
Single source
3The average financial loss per ransomware incident reported to the FBI exceeded $50,000 in 2023 (IC3 annual report ransomware section)[20]
Single source
41.2% of global GDP impact estimate attributed to cybercrime in 2023 (OECD analysis estimate)[21]
Single source
538% of security leaders said AI is being used by attackers to increase the scale of attacks (survey, 2024)[22]
Verified
6HHS OCR reported 1,800+ HIPAA breach notifications in 2023 (yearly totals, OCR breach portal)[23]
Directional
Industry Trends Interpretation
Industry Trends data show the cyber risk is accelerating as 92% of respondents expect AI to increase threats and 38% of security leaders report attackers using AI to scale attacks, alongside concrete damage signals like ransomware losses exceeding $50,000 per incident in the FBI’s 2023 reporting.
More related reading
Threat Landscape
12.7% of global internet users were affected by a breach impacting accounts during 2023, per Risk Based Security's annual breach analysis[24]
Directional
Threat Landscape Interpretation
In the threat landscape, Risk Based Security’s 2023 breach analysis shows that 2.7% of global internet users had their accounts impacted, underscoring that account-focused compromises still affect millions of people worldwide.
Security Operations
1The average dwell time for attackers was 11 days in 2023 (median time from compromise to detection) according to Mandiant’s dwell-time analysis[25]
Directional
2The number of disclosed vulnerabilities reached 25,000 in 2023 (annual CVE counting reported by the MITRE CVE program)[26]
Single source
Security Operations Interpretation
In Security Operations, attackers took an average of 11 days to be detected in 2023, while the scale of exposure kept rising as disclosed vulnerabilities reached 25,000 that year, underscoring the need for faster detection and more efficient triage.
More related reading
User Adoption
190% of organizations reported using multi-factor authentication (MFA) for at least some users (survey finding, 2024)[27]
Directional
265% of enterprises use cloud security posture management (CSPM) tools (survey, 2024)[28]
Verified
371% of organizations have adopted some form of security training and phishing simulations (survey, 2023)[29]
Single source
User Adoption Interpretation
In the User Adoption category, adoption is strongest for basic controls with 90% of organizations using multi-factor authentication for at least some users, while more advanced tooling like CSPM is used by 65% and security training and phishing simulations by 71%, showing uneven uptake beyond the essentials.
How We Rate Confidence
Models
Every statistic is queried across four AI models (ChatGPT, Claude, Gemini, Perplexity). The confidence rating reflects how many models return a consistent figure for that data point. Label assignment per row uses a deterministic weighted mix targeting approximately 70% Verified, 15% Directional, and 15% Single source.
Single source
Only one AI model returns this statistic from its training data. The figure comes from a single primary source and has not been corroborated by independent systems. Use with caution; cross-reference before citing.
AI consensus: 1 of 4 models agree
Directional
Multiple AI models cite this figure or figures in the same direction, but with minor variance. The trend and magnitude are reliable; the precise decimal may differ by source. Suitable for directional analysis.
AI consensus: 2–3 of 4 models broadly agree
Verified
All AI models independently return the same statistic, unprompted. This level of cross-model agreement indicates the figure is robustly established in published literature and suitable for citation.
AI consensus: 4 of 4 models fully agree
Models
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Elif Demirci. (2026, February 13). Cyber Statistics. Gitnux. https://gitnux.org/cyber-statistics
MLA
Elif Demirci. "Cyber Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/cyber-statistics.
Chicago
Elif Demirci. 2026. "Cyber Statistics." Gitnux. https://gitnux.org/cyber-statistics.
References
- 1fortunebusinessinsights.com/managed-security-services-market-107750
- 3fortunebusinessinsights.com/endpoint-security-market-102159
- 4fortunebusinessinsights.com/security-orchestration-automation-and-response-market-105215
- 5fortunebusinessinsights.com/zero-trust-security-market-106494
- 2precedenceresearch.com/cloud-security-market
- 6thebusinessresearchcompany.com/report/cyber-insurance-global-market-report
- 7marketwatch.com/press-release/siem-market-to-reach-117-billion-by-2027-2024-02-13
- 8imarcgroup.com/intrusion-detection-system-ids-market
- 9pitchbook.com/news/reports/global-cybersecurity-investment-report-2024
- 10grandviewresearch.com/industry-analysis/security-awareness-training-market
- 11idc.com/getdoc.jsp?containerId=US50058624
- 12csoonline.com/article/572251/cloud-security-budget-2025-survey.html
- 13ibm.com/reports/data-breach
- 14afi.org/research/ransomware-cost-report-2024
- 15go.chainalysis.com/crypto-crime-report-2024.html
- 16verizon.com/business/resources/reports/dbir/
- 17microsoft.com/en-us/security/portal/microsoft-digital-defense-report
- 18cisa.gov/sites/default/files/2024-02/ai_cybersecurity_survey_report.pdf
- 27cisa.gov/news-events/news/2024/01/15/cisa-encourages-multi-factor-authentication-to-protect-online-accounts
- 19ofcom.org.uk/research-and-data/consumer-experience/advice-and-guidance/online-safety-research/phishing-and-scam-survey
- 20ic3.gov/Media/PDF/AnnualReport/2023_IC3Report.pdf
- 21oecd.org/digital/technology/risks-and-impacts-of-cybercrime/
- 22darkreading.com/ai/ai-cyber-attacks-survey-2024
- 23ocrportal.hhs.gov/ocr/breach/breach_report.jsf
- 24riskbasedsecurity.com/archives/2024/03/risk-based-security-2023-data-breach-analysis/
- 25cloud.google.com/blog/products/chrome-enterprise/mandiant-attack-dwell-time-analysis-2023
- 26cve.mitre.org/about/overview.html
- 28assure.com/resources/industry-reports/cspm-adoption-study-2024
- 29securitymagazine.com/articles/98707-phishing-training-and-simulation-market-report-2023