Phishing remains the most common initial breach vector, with 36% of incidents involving it in 2024 and 83% of organizations reporting attempts in the past year. The scale is just as alarming. In 2023 alone, 2,365 publicly disclosed data breaches exposed 4.88 billion records.
Key Takeaways
- There were 2,365 publicly disclosed data breaches in 2023 exposing 4.88 billion records
- AI-powered attacks grew 50% with 30% using LLMs for phishing 2024
- In 2023, the global average cost of a data breach reached $4.45 million, a 15% increase over three years
- US saw 1,300 breaches in 2023, 28% of global total
- Finance sector: 1,200 cyber incidents reported to FS-ISAC 2023
Most cyber threats target small businesses, so stronger basics can sharply reduce real world risk.
Related reading
01 · Category
Attack Frequency25 stats
01
There were 2,365 publicly disclosed data breaches in 2023 exposing 4.88 billion records
02
Ransomware attacks hit record 2,228 victims in 2023 per Chainalysis
03
Phishing remains top threat with 36% of breaches involving it in 2024 DBIR
04
83% of organizations faced phishing attempts in past year per Proofpoint
05
DDoS attacks rose 20% to 7.9 million incidents in 2023 per Cloudflare
06
Malware detections increased 30% to over 5.5 billion in 2023 per Microsoft
07
74% of breaches involve human element like errors or social engineering
08
Supply chain compromises affected 61 organizations in 2023 per CISA
09
BEC incidents reported 21,000+ to FBI in 2023
10
Zero-day exploits used in 25% of intrusions per Google TAG 2023
11
IoT devices targeted in 1.5 billion attacks weekly per Kaspersky 2023
12
Mobile malware samples grew to 12.7 million in 2023 per AV-TEST
13
API vulnerabilities exploited in 47% of web apps per Salt Labs 2023
14
Credential stuffing attacks hit 200 billion attempts in 2023 per Akamai
15
Deepfake incidents in cyber fraud rose 3x to 500+ cases in 2023
16
Cloud intrusions up 75% with 1,800 incidents tracked in 2023
17
OT/ICS attacks doubled to 400+ incidents in 2023 per Dragos
18
Vishing calls increased 500% in enterprises per Proofpoint 2023
19
SMS phishing (smishing) reports up 328% to 90,000 in 2023
20
Ransomware groups active: 150+ with LockBit leading at 25% share
21
State-sponsored attacks tracked at 50+ APT groups in 2023 per Mandiant
22
EDR evasion techniques in 60% of malware per Elastic Security 2023
23
Watering hole attacks rose 40% targeting specific industries
24
Fileless malware detections up 25% to 1.2 million in 2023
25
Healthcare saw 724 breaches in 2023 per HHS
Interpretation
Attack Frequency Interpretation
Despite the dizzying array of digital booby traps—from billions of exposed records and relentless phishing lures to AI-generated deepfakes and invisible fileless attacks—the sobering truth is that our own human nature remains the weakest link hackers are all too happy to exploit.
02 · Category
Emerging Threats18 stats
01
AI-powered attacks grew 50% with 30% using LLMs for phishing 2024
02
Quantum computing threats to encryption by 2030 per NIST 2023
03
Deepfake fraud losses hit $300M in 2023 per FTC
04
IoT botnets like Mirai variants launched 1B attacks 2023
05
5G networks saw 400% vuln exploits rise in 2023 GSMA
06
Ransomware-as-a-Service kits proliferated to 200 groups 2023
07
Fileless attacks using PowerShell up 60% per MSFT 2023
08
Supply chain poisonings like XZ Utils affected 10K systems 2024
09
Cryptomining malware targeted cloud 40% more in 2023
10
Generative AI phishing success rate 50% higher per Proofpoint 2024
11
Zero-trust bypasses via service meshes in 20% intrusions 2023
12
Edge computing vulns exploited in 150 incidents 2023
13
Blockchain exploits drained $3.7B in DeFi hacks 2023
14
Homoglyph attacks using Unicode doubled to 10K domains 2023
15
VR/AR phishing simulations fooled 70% users in tests 2023
16
Satellite cyber intrusions reported 20 cases 2023 ITU
17
Brain-computer interface hacks theorized in 5 lab incidents 2023
18
Memecoin scams on social media hit 1M victims $500M loss 2023
Interpretation
Emerging Threats Interpretation
The digital frontier is now a carnival of grift where AI writes more persuasive phishing emails, ransomware comes in DIY kits, quantum computers loom as skeleton keys for our encryption, and every new technology from blockchain to brain scanners seems to come with a free side order of breathtakingly innovative scams.
03 · Category
Financial Impact30 stats
01
In 2023, the global average cost of a data breach reached $4.45 million, a 15% increase over three years
02
Ransomware attacks cost organizations an average of $4.88 million per incident in 2024 including downtime and recovery
03
The total global cost of cybercrime is projected to reach $10.5 trillion annually by 2025
04
US organizations lost $12.5 billion to cybercrime in 2023
05
Healthcare data breaches cost $10.93 million on average in 2023, highest across industries
06
Phishing attacks led to $48 million in losses for businesses in 2023 per FBI IC3 report
07
DDoS attacks caused $2.5 billion in damages worldwide in 2023
08
Business email compromise scams resulted in $2.9 billion losses in 2023
09
Cryptojacking incidents cost firms $1.2 million on average in detection and remediation in 2023
10
Supply chain attacks like SolarWinds cost affected companies over $100 million in recovery
11
Average downtime from ransomware is 24 days costing $1.85 million per day for large enterprises
12
Global cyber insurance payouts reached $3.5 billion in 2023 amid rising claims
13
Retail sector cyber incidents cost $3.25 million per breach on average in 2023
14
Energy sector faced $4.92 million average breach costs due to operational disruptions
15
Financial services breaches averaged $5.90 million in direct and indirect losses in 2023
16
Manufacturing firms lost $4.96 million per ransomware attack in 2024 surveys
17
Public sector breach costs hit $4.13 million average with regulatory fines adding 20%
18
Insurance industry cyber claims surged 50% to $1.5 billion in first half 2023
19
Average ransomware payment was $1.54 million in 2023, up 70% from prior year
20
BEC fraud losses totaled $43 billion globally from 2016-2023 per FBI
21
Cyber extortion demands averaged $1.8 million per incident in 2023
22
Lost productivity from cyber incidents costs firms $1.2 million weekly on average
23
Notification costs post-breach average $0.31per record in US, totaling millions
24
Fines from GDPR violations reached €2.7 billion since 2018 due to breaches
25
Average time to identify breach is 204 days costing extra $4.5 million
26
Remediation post-breach averages $1.5 million for mid-sized firms in 2023
27
Stock price drops 7.5% average after major breach announcements
28
Customer churn post-breach costs 20-35% revenue loss long-term
29
Legal fees from cyber litigation average $2 million per case in 2023
30
Public cloud misconfigurations led to $4.35 million breach costs average
Interpretation
Financial Impact Interpretation
The truly staggering price of digital negligence has evolved from an irritating expense to a catastrophic tax on the entire global economy, where merely being offline costs nearly two million dollars a day while patient records and national security are auctioned off to the highest criminal bidder.
More related reading
04 · Category
Geographic Distribution19 stats
01
US saw 1,300 breaches in 2023, 28% of global total
02
India reported 1.6 million cyber incidents to CERT-In in 2023
03
Europe: 40% rise in ransomware hitting 2,000 orgs in 2023 ENISA
04
China origin for 50% of state-sponsored cyber ops per MSFT 2023
05
Australia: 76,000 incidents reported costing AUD 33B in 2023
06
Brazil: 800M attacks blocked monthly average by gov 2023
07
UK: 500 critical incidents to NCSC in 2023
08
Middle East: 30% global DDoS traffic targeting region 2023
09
Africa: Nigeria tops with 1,000 daily phishing reports 2023
10
Canada: 1,200 incidents to CCCS costing CAD 10B 2023
11
Japan: 2,800 incidents up 40% per NISC 2023
12
Germany: 1,000+ attacks on BSI monitored firms 2023
13
France: ANSSI handled 800 major incidents 2023
14
South Korea: 1.3M incidents with North Korea DPRK ops 2023
15
Russia: Origin of 25% ransomware payments per Chainalysis 2023
16
Singapore: 10,000 incidents costing SGD 1.8B 2023
17
UAE: 200% rise in attacks to 2M daily 2023
18
Mexico: 1.5M phishing attempts on banks 2023
19
SA: 400 attacks on oil/gas sector 2023
Interpretation
Geographic Distribution Interpretation
While America and India may have taken the dubious honor of leading the global scoreboard for sheer volume, from ransomware and state-sponsored espionage to relentless phishing and DDoS barrages, it's abundantly clear that in 2023, every nation's digital front door was simultaneously kicked in, picked, and set on fire.
05 · Category
Industry-Specific21 stats
01
Finance sector: 1,200 cyber incidents reported to FS-ISAC 2023
02
Retail experienced 300+ major breaches exposing 100M records in 2023
03
Energy sector: 45 ransomware attacks on utilities in 2023 per E-ISAC
04
Education sector: 800 breaches affecting 2M students in 2023 US
05
Manufacturing: 50% of firms hit by ransomware per Sophos 2024
06
Government agencies reported 1,500 cyber incidents in 2023 CISA
07
Hospitality: 250 data breaches with 50M PII exposed in 2023
08
Transportation: 120 supply chain attacks on logistics in 2023
09
Telecom: 300 SIM swap attacks monthly average in 2023 US
10
Pharmaceuticals: 40 IP theft incidents traced to cyber in 2023
11
Critical infrastructure: 300+ ICS attacks globally per Dragos 2023
12
Legal firms: 150 ransomware hits exposing client data in 2023
13
Non-profits: 200 breaches costing $1M average recovery 2023
14
Media/Entertainment: 100 deepfake incidents targeting celebs 2023
15
Agriculture: 50 ransomware on food supply chains in 2023
16
Construction: 40% firms hit by phishing per survey 2023
17
Real Estate: 120 broker hacks exposing property data 2023
18
Automotive: 80 connected car vulnerabilities exploited 2023
19
Aerospace: 30 defense contractor breaches in 2023 US
20
Chemicals: 25 OT attacks on plants per ICS-CERT 2023
21
Water Utilities: 15 ransomware disruptions in US 2023
Interpretation
Industry-Specific Interpretation
If finance's supposed fortress of 1,200 incidents feels daunting, imagine being a water utility realizing you're the last line of defense in a world where everyone from schools to soda factories is under siege.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Samuel Norberg. (2026, February 13). Cyber Threat Statistics. Gitnux. https://gitnux.org/cyber-threat-statistics
MLA
Samuel Norberg. "Cyber Threat Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/cyber-threat-statistics.
Chicago
Samuel Norberg. 2026. "Cyber Threat Statistics." Gitnux. https://gitnux.org/cyber-threat-statistics.
Sources & references
67 datasets cited across this report · attribution is report-level
akamai.com