Cyber losses and security spending are moving fast, but the contrast is what really stands out. For example, the global security orchestration automation and response market is projected to reach $5.0 billion by 2028 while the average attacker dwell time is still 11 days. From phishing driven breaches to zero trust growth to $107.2 billion by 2029, these statistics map how threats and defenses are scaling at very different speeds.
Key Takeaways
- The global managed security services market is forecast to grow to $55.3 billion by 2029
- The global cloud security market size is forecast to reach $105.2 billion by 2032
- The global endpoint security market is projected to reach $26.1 billion by 2028
- Organizations with more than 10,000 employees had an average data breach cost of $5.1 million in 2023 (IBM 2023 Cost of a Data Breach report)
- A median of 20.8 days is reported for the time to recover from ransomware incidents (global survey, 2024)
- The mean ransom payment for ransomware incidents was $200,000 in 2023 (Chainalysis crypto crime report for ransomware payments)
- In the Verizon DBIR 2024, 18% of breaches were caused by phishing
- Microsoft Defender blocked 2.5 billion malware samples in 2023 (Microsoft Digital Defense Report 2024)
- 92% of respondents said they believe AI will increase cybersecurity threats
- In the UK, 28% of individuals reported having seen a phishing scam in the last year (2024 UK Ofcom consumer survey)
- The average financial loss per ransomware incident reported to the FBI exceeded $50,000 in 2023 (IC3 annual report ransomware section)
- 2.7% of global internet users were affected by a breach impacting accounts during 2023, per Risk Based Security's annual breach analysis
- The average dwell time for attackers was 11 days in 2023 (median time from compromise to detection) according to Mandiant’s dwell-time analysis
- The number of disclosed vulnerabilities reached 25,000 in 2023 (annual CVE counting reported by the MITRE CVE program)
- 90% of organizations reported using multi-factor authentication (MFA) for at least some users (survey finding, 2024)
Cybersecurity spending and cyber risk are both rising fast, with major market growth and costly breaches driven by phishing.
Related reading
01 · Category
Market Size12 stats
01
The global managed security services market is forecast to grow to $55.3 billion by 2029
02
The global cloud security market size is forecast to reach $105.2 billion by 2032
03
The global endpoint security market is projected to reach $26.1 billion by 2028
04
The global security orchestration automation and response (SOAR) market is projected to reach $5.0 billion by 2028
05
The global zero trust security market is expected to grow from $21.8 billion in 2023 to $107.2 billion by 2029
06
The global cyber insurance market is projected to reach $31.1 billion by 2030
07
The global SIEM market is forecast to reach $11.7 billion by 2027
08
The global intrusion detection system (IDS) market is expected to reach $17.7 billion by 2030
09
$5.3 billion in VC funding for cybersecurity startups was reported globally in 2023 (PitchBook annual cybersecurity funding)
10
$1.4 billion was the annual global spend on security awareness training platforms in 2023 (industry estimate)
11
$14.2 billion was the global market size for managed detection and response (MDR) in 2023 (market estimate)
12
35% of IT and security executives planned to increase budgets for cloud security in 2025 (survey, 2024)
Interpretation
Market Size Interpretation
For the market size category, cybersecurity spend and capability are set to scale rapidly with major segments surging from $14.2 billion in 2023 MDR to $31.1 billion cyber insurance by 2030 and a zero trust market forecast to jump from $21.8 billion in 2023 to $107.2 billion by 2029, signaling sustained, broad-based growth across key security offerings.
02 · Category
Cost Analysis3 stats
01
Organizations with more than 10,000 employees had an average data breach cost of $5.1 million in 2023 (IBM 2023 Cost of a Data Breach report)
02
A median of 20.8 days is reported for the time to recover from ransomware incidents (global survey, 2024)
03
The mean ransom payment for ransomware incidents was $200,000in 2023 (Chainalysis crypto crime report for ransomware payments)
Interpretation
Cost Analysis Interpretation
From a cost analysis perspective, large organizations with more than 10,000 employees faced an average breach cost of $5.1 million in 2023, while ransomware incidents still take a median of 20.8 days to recover and commonly involve a mean ransom payment of $200,000, showing how quickly expenses can stack up across the full incident timeline.
03 · Category
Performance Metrics2 stats
01
In the Verizon DBIR 2024, 18% of breaches were caused by phishing
02
Microsoft Defender blocked 2.5 billion malware samples in 2023 (Microsoft Digital Defense Report 2024)
Interpretation
Performance Metrics Interpretation
Under performance metrics, phishing drove 18% of breaches in Verizon DBIR 2024 while defenses scaled to block 2.5 billion malware samples in 2023, highlighting that measurable detection and blocking capacity are crucial even as this specific threat vector remains a major breach contributor.
04 · Category
Industry Trends6 stats
01
92% of respondents said they believe AI will increase cybersecurity threats
02
In the UK, 28% of individuals reported having seen a phishing scam in the last year (2024 UK Ofcom consumer survey)
03
The average financial loss per ransomware incident reported to the FBI exceeded $50,000in 2023 (IC3 annual report ransomware section)
04
1.2% of global GDP impact estimate attributed to cybercrime in 2023 (OECD analysis estimate)
05
38% of security leaders said AI is being used by attackers to increase the scale of attacks (survey, 2024)
06
HHS OCR reported 1,800+ HIPAA breach notifications in 2023 (yearly totals, OCR breach portal)
Interpretation
Industry Trends Interpretation
Industry Trends data show the cyber risk is accelerating as 92% of respondents expect AI to increase threats and 38% of security leaders report attackers using AI to scale attacks, alongside concrete damage signals like ransomware losses exceeding $50,000 per incident in the FBI’s 2023 reporting.
More related reading
05 · Category
Threat Landscape1 stats
01
2.7% of global internet users were affected by a breach impacting accounts during 2023, per Risk Based Security's annual breach analysis
Interpretation
Threat Landscape Interpretation
In the threat landscape, Risk Based Security’s 2023 breach analysis shows that 2.7% of global internet users had their accounts impacted, underscoring that account-focused compromises still affect millions of people worldwide.
06 · Category
Security Operations2 stats
01
The average dwell time for attackers was 11 days in 2023 (median time from compromise to detection) according to Mandiant’s dwell-time analysis
02
The number of disclosed vulnerabilities reached 25,000 in 2023 (annual CVE counting reported by the MITRE CVE program)
Interpretation
Security Operations Interpretation
In Security Operations, attackers took an average of 11 days to be detected in 2023, while the scale of exposure kept rising as disclosed vulnerabilities reached 25,000 that year, underscoring the need for faster detection and more efficient triage.
07 · Category
User Adoption3 stats
01
90% of organizations reported using multi-factor authentication (MFA) for at least some users (survey finding, 2024)
02
65% of enterprises use cloud security posture management (CSPM) tools (survey, 2024)
03
71% of organizations have adopted some form of security training and phishing simulations (survey, 2023)
Interpretation
User Adoption Interpretation
In the User Adoption category, adoption is strongest for basic controls with 90% of organizations using multi-factor authentication for at least some users, while more advanced tooling like CSPM is used by 65% and security training and phishing simulations by 71%, showing uneven uptake beyond the essentials.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Elif Demirci. (2026, February 13). Cyber Statistics. Gitnux. https://gitnux.org/cyber-statistics
MLA
Elif Demirci. "Cyber Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/cyber-statistics.
Chicago
Elif Demirci. 2026. "Cyber Statistics." Gitnux. https://gitnux.org/cyber-statistics.
Sources & references
29 datasets cited across this report · attribution is report-level
+4 additional datasets cited (not shown individually)