Cyber risk is rising while incident recovery and detection times still lag. The average attacker dwell time was 11 days in 2023, even as the global security orchestration automation and response market is projected to reach $5.0 billion by 2028. Organizations also face sustained investment momentum, with the zero trust market forecast to grow from $21.8 billion in 2023 to $107.2 billion by 2029.
Key Takeaways
- The global managed security services market is forecast to grow to $55.3 billion by 2029
- The global cloud security market size is forecast to reach $105.2 billion by 2032
- The global endpoint security market is projected to reach $26.1 billion by 2028
- Organizations with more than 10,000 employees had an average data breach cost of $5.1 million in 2023 (IBM 2023 Cost of a Data Breach report)
- A median of 20.8 days is reported for the time to recover from ransomware incidents (global survey, 2024)
- The mean ransom payment for ransomware incidents was $200,000 in 2023 (Chainalysis crypto crime report for ransomware payments)
- In the Verizon DBIR 2024, 18% of breaches were caused by phishing
- Microsoft Defender blocked 2.5 billion malware samples in 2023 (Microsoft Digital Defense Report 2024)
- 92% of respondents said they believe AI will increase cybersecurity threats
- In the UK, 28% of individuals reported having seen a phishing scam in the last year (2024 UK Ofcom consumer survey)
- The average financial loss per ransomware incident reported to the FBI exceeded $50,000 in 2023 (IC3 annual report ransomware section)
- 2.7% of global internet users were affected by a breach impacting accounts during 2023, per Risk Based Security's annual breach analysis
- The average dwell time for attackers was 11 days in 2023 (median time from compromise to detection) according to Mandiant’s dwell-time analysis
- The number of disclosed vulnerabilities reached 25,000 in 2023 (annual CVE counting reported by the MITRE CVE program)
- 90% of organizations reported using multi-factor authentication (MFA) for at least some users (survey finding, 2024)
Cybersecurity spending and cyber risk are both rising fast, with major market growth and costly breaches driven by phishing.
Related reading
01 · Category
Market Size12 stats
01
The global managed security services market is forecast to grow to $55.3 billion by 2029
02
The global cloud security market size is forecast to reach $105.2 billion by 2032
03
The global endpoint security market is projected to reach $26.1 billion by 2028
04
The global security orchestration automation and response (SOAR) market is projected to reach $5.0 billion by 2028
05
The global zero trust security market is expected to grow from $21.8 billion in 2023 to $107.2 billion by 2029
06
The global cyber insurance market is projected to reach $31.1 billion by 2030
07
The global SIEM market is forecast to reach $11.7 billion by 2027
08
The global intrusion detection system (IDS) market is expected to reach $17.7 billion by 2030
09
$5.3 billion in VC funding for cybersecurity startups was reported globally in 2023 (PitchBook annual cybersecurity funding)
10
$1.4 billion was the annual global spend on security awareness training platforms in 2023 (industry estimate)
11
$14.2 billion was the global market size for managed detection and response (MDR) in 2023 (market estimate)
12
35% of IT and security executives planned to increase budgets for cloud security in 2025 (survey, 2024)
Interpretation
Market Size Interpretation
The market size data shows rapid and expanding demand across the cyber security stack, with figures like the global managed security services market reaching $55.3 billion by 2029 and the global zero trust security market climbing from $21.8 billion in 2023 to $107.2 billion by 2029.
02 · Category
Cost Analysis3 stats
01
Organizations with more than 10,000 employees had an average data breach cost of $5.1 million in 2023 (IBM 2023 Cost of a Data Breach report)
02
A median of 20.8 days is reported for the time to recover from ransomware incidents (global survey, 2024)
03
The mean ransom payment for ransomware incidents was $200,000in 2023 (Chainalysis crypto crime report for ransomware payments)
Interpretation
Cost Analysis Interpretation
From a cost analysis perspective, ransomware and breach costs can be substantial and slow to unwind, with organizations averaging $5.1 million in data breach losses in 2023, ransomware recovery taking a median 20.8 days, and mean ransom demands averaging $200,000.
03 · Category
Performance Metrics2 stats
01
In the Verizon DBIR 2024, 18% of breaches were caused by phishing
02
Microsoft Defender blocked 2.5 billion malware samples in 2023 (Microsoft Digital Defense Report 2024)
Interpretation
Performance Metrics Interpretation
From a performance metrics angle, the Verizon DBIR 2024 shows phishing accounts for 18% of breaches while Microsoft Defender blocked 2.5 billion malware samples in 2023, underscoring how high-volume prevention efforts are still challenged by a consistently common initial attack vector.
04 · Category
Industry Trends6 stats
01
92% of respondents said they believe AI will increase cybersecurity threats
02
In the UK, 28% of individuals reported having seen a phishing scam in the last year (2024 UK Ofcom consumer survey)
03
The average financial loss per ransomware incident reported to the FBI exceeded $50,000in 2023 (IC3 annual report ransomware section)
04
1.2% of global GDP impact estimate attributed to cybercrime in 2023 (OECD analysis estimate)
05
38% of security leaders said AI is being used by attackers to increase the scale of attacks (survey, 2024)
06
HHS OCR reported 1,800+ HIPAA breach notifications in 2023 (yearly totals, OCR breach portal)
Interpretation
Industry Trends Interpretation
Across industry trends in 2023 and 2024, the signals are clear that cyber risk is escalating and scaling fast, with 92% of respondents expecting AI to increase threats and 38% of security leaders reporting that attackers are already using AI to expand attacks.
More related reading
05 · Category
Threat Landscape1 stats
01
2.7% of global internet users were affected by a breach impacting accounts during 2023, per Risk Based Security's annual breach analysis
Interpretation
Threat Landscape Interpretation
In the Threat Landscape, 2.7% of global internet users faced account-impacting breaches during 2023, underscoring that a meaningful minority is being directly exposed through cyber incidents.
06 · Category
Security Operations2 stats
01
The average dwell time for attackers was 11 days in 2023 (median time from compromise to detection) according to Mandiant’s dwell-time analysis
02
The number of disclosed vulnerabilities reached 25,000 in 2023 (annual CVE counting reported by the MITRE CVE program)
Interpretation
Security Operations Interpretation
In Security Operations, attackers taking a median of 11 days to get detected in 2023 shows how slow detection can be, while the jump to 25,000 disclosed vulnerabilities that year underscores the mounting workload teams must triage and respond to.
07 · Category
User Adoption3 stats
01
90% of organizations reported using multi-factor authentication (MFA) for at least some users (survey finding, 2024)
02
65% of enterprises use cloud security posture management (CSPM) tools (survey, 2024)
03
71% of organizations have adopted some form of security training and phishing simulations (survey, 2023)
Interpretation
User Adoption Interpretation
User adoption in cyber security is strongly trending toward basic protections, with 90% of organizations using MFA for at least some users, 65% deploying CSPM tools for visibility, and 71% rolling out security training and phishing simulations.
report visual · Comparison
Cyber Security Spending & Market Growth
Fast-growing cyber-security segments point to sustained demand across managed security, cloud security, and zero trust deployments.
The global cloud security market size is forecast to reach $105.2 billion by 2032$105.2 billion
The global managed security services market is forecast to grow to $55.3 billion by 2029
$55.3 billion
The global zero trust security market is expected to grow from $21.8 billion in 2023 to $107.2 billion by 2029
$21.8 billion
source-verifiedprecedenceresearch.com · fortunebusinessinsights.com2032
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Elif Demirci. (2026, February 13). Cyber Statistics. Gitnux. https://gitnux.org/cyber-statistics
MLA
Elif Demirci. "Cyber Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/cyber-statistics.
Chicago
Elif Demirci. 2026. "Cyber Statistics." Gitnux. https://gitnux.org/cyber-statistics.
Sources & references
29 datasets cited across this report · attribution is report-level
+4 additional datasets cited (not shown individually)