GITNUX MARKETDATA REPORT 2024

Cybersecurity In The Utilities Industry Statistics

Cyber attacks on the utilities industry have been steadily increasing, with overall security incidents up by 55% and the average cost of a breach reaching over 6 million USD in 2020.

Highlights: Cybersecurity In The Utilities Industry Statistics

  • Approximately two-thirds of U.S utilities reported they are targeted by cyber-attacks at least once a month.
  • According to a survey by Siemens and the Ponemon Institute, only 31% of utility professionals are "very confident" in their ability to stay secure.
  • The utility industry is the third most vulnerable sector globally with 9.2% of all cybersecurity breaches.
  • 70% of the utilities sector infrastructure has suffered a cyber attack in the last year.
  • 66% of utility executives cite insufficient cybersecurity due to lack of funding.
  • More than a quarter of all cyber attacks in 2019 were directed towards the utilities sector according to IBM research.
  • 68% of utility industry decision-makers believe the financial impact of a cyber breach to their organization would exceed $1 million per incident.
  • 65% of utilities companies identify "detection of sophisticated threats" as the greatest challenge.
  • By 2025, the utilities security market is expected to reach $1.90 billion.
  • In 2020, 81% of utility organizations reported being victims of at least one successful cyber attack.
  • Over 57% of utility professionals view their organization's industrial control system (ICS) security as "high risk."
  • More than 40% of utility companies do not have the trust and cooperation of other cybersecurity stakeholders.
  • According to a study by Global Market Insights, by 2024, the cybersecurity market in energy and utility sector is expected to reach a worth of $8 billion.
  • As per KPMG’s 2019 Global Power & Utilities Survey, about 48% of power and utility CEOs agree that becoming a victim of cyber attack is inevitable.
  • 64% of utilities companies said they had experienced at least one cybersecurity intrusion or attack in the last 12 months.
  • According to a report by ABI Research, global cybersecurity spending for critical electricity infrastructure is expected to hit $12.2 billion by 2024.
  • 76% of utility executives believe their country's government would be unable to identify or protect their organization against a major cyber attack.

Table of Contents

The Latest Cybersecurity In The Utilities Industry Statistics Explained

Approximately two-thirds of U.S utilities reported they are targeted by cyber-attacks at least once a month.

The statistic indicates that a significant proportion of U.S utilities face frequent cyber-attacks, with approximately two-thirds reporting being targeted at least once a month. This high frequency of attacks highlights the vulnerability of the utilities sector to cyber threats and the concerning level of cybersecurity risks these organizations are exposed to. It suggests that a large number of utility companies are constantly under threat of potential cyber breaches, which could have serious implications for the security and reliability of critical infrastructure services. This statistic underscores the urgent need for robust cybersecurity measures and strategies within the utilities sector to safeguard against persistent and evolving cyber threats.

According to a survey by Siemens and the Ponemon Institute, only 31% of utility professionals are “very confident” in their ability to stay secure.

The statistic from the survey by Siemens and the Ponemon Institute suggests that a majority of utility professionals, 69%, do not feel very confident in their ability to stay secure. This finding raises concerns about the level of preparedness and effectiveness of cybersecurity measures within the utility industry, where maintaining secure systems is crucial for safeguarding critical infrastructure. The low confidence level reported highlights a potential vulnerability in the industry, emphasizing the need for enhanced security practices, training, and investments to address and mitigate cyber risks effectively.

The utility industry is the third most vulnerable sector globally with 9.2% of all cybersecurity breaches.

The statistic that the utility industry is the third most vulnerable sector globally with 9.2% of all cybersecurity breaches indicates that organizations within the utility sector, such as energy and water providers, face significant risks in terms of cybersecurity threats. This vulnerability highlights the importance of implementing robust cybersecurity measures within the industry to protect critical infrastructure and prevent potential disruptions to essential services. Given the sector’s essential role in supporting society, urgent action is required to address and mitigate these vulnerabilities to safeguard the stability and reliability of utility services.

70% of the utilities sector infrastructure has suffered a cyber attack in the last year.

The statistic “70% of the utilities sector infrastructure has suffered a cyber attack in the last year” indicates that a significant majority of the infrastructure within the utilities sector, which includes industries such as electricity, gas, and water supply, has been targeted by cyber attacks within a one-year period. This statistic highlights a concerning vulnerability in the sector’s technological systems and underscores the ongoing threat posed by cyber attacks to critical infrastructure. The high percentage suggests that utilities companies may need to enhance their cybersecurity measures to better protect against potential breaches and disruptions to essential services.

66% of utility executives cite insufficient cybersecurity due to lack of funding.

The statistic ‘66% of utility executives cite insufficient cybersecurity due to lack of funding’ indicates that a majority of executives in the utility sector believe that the level of cybersecurity protection in their organizations is inadequate, primarily due to financial constraints. This suggests that a significant portion of utility companies may not be investing enough resources into cybersecurity measures, leaving them vulnerable to potential cyber threats and attacks. The statistic highlights the critical need for these organizations to prioritize cybersecurity funding and allocate sufficient resources to protect their operations and data from cyber risks.

More than a quarter of all cyber attacks in 2019 were directed towards the utilities sector according to IBM research.

The statistic that more than a quarter of all cyber attacks in 2019 were directed towards the utilities sector, as reported by IBM research, highlights the significant vulnerability and targeting of critical infrastructure by cyber criminals. The utilities sector, which includes organizations involved in providing essential services like electricity, water, and gas, is increasingly being targeted due to the potential for widespread disruption and impact on society. The statistic underscores the pressing need for heightened cybersecurity measures and investment in protective technologies within the utilities sector to safeguard against potential cyber threats and ensure the reliability and resilience of critical infrastructure services.

68% of utility industry decision-makers believe the financial impact of a cyber breach to their organization would exceed $1 million per incident.

The statistic indicates that 68% of decision-makers in the utility industry believe that a cyber breach would result in a financial impact exceeding $1 million per incident for their organization. This suggests that a significant majority of decision-makers in the industry are concerned about the potential financial consequences of cyber breaches, emphasizing the potential severity of such incidents. The high percentage of decision-makers holding this belief highlights the perceived risk and financial implications associated with cyber attacks for utility companies, underlining the importance of having robust cybersecurity measures in place to protect against such threats and mitigate potential losses.

65% of utilities companies identify “detection of sophisticated threats” as the greatest challenge.

The statistic reveals that a significant majority, 65% specifically, of utilities companies perceive the detection of sophisticated threats as their primary challenge. This suggests that utilities companies view the identification and prevention of advanced and complex threats as a critical issue that is currently posing a significant obstacle to their operations. Such a high percentage indicates a widespread concern within the sector regarding the increasing sophistication and evolving nature of cyber threats faced by utilities companies, highlighting the urgent need for enhanced cybersecurity measures and strategies to effectively address these challenges and safeguard critical infrastructure.

By 2025, the utilities security market is expected to reach $1.90 billion.

This statistic indicates that the utilities security market is projected to grow significantly by the year 2025, reaching a market value of $1.90 billion. This growth is likely driven by increasing concerns around the security and resilience of utility infrastructure, such as power plants, water treatment facilities, and electrical grids. As technology continues to advance and cyber threats become more sophisticated, utilities companies are investing more in security solutions to protect their critical assets and ensure uninterrupted service delivery. The substantial projected market value suggests a growing recognition of the importance of safeguarding utility systems against potential threats and vulnerabilities in the coming years.

In 2020, 81% of utility organizations reported being victims of at least one successful cyber attack.

The statistic indicates that in the year 2020, a significant proportion of utility organizations, specifically 81%, reported experiencing at least one successful cyber attack. This high percentage suggests that the utility sector is particularly vulnerable to cyber threats and attacks. The implications of such attacks on utility organizations can have far-reaching consequences, including potential disruptions in critical services, data breaches, financial losses, and compromised infrastructure. The statistic underscores the importance of robust cybersecurity measures and strategies for the utility industry to safeguard against cyber threats and protect the integrity and stability of essential services.

Over 57% of utility professionals view their organization’s industrial control system (ICS) security as “high risk.”

The statistic indicates that a majority of utility professionals perceive their organization’s industrial control system (ICS) security as being at a high level of risk. This suggests that many professionals in the utility sector are concerned about the vulnerabilities and potential threats to their ICS, which is crucial for the operation and management of essential utilities such as electricity, water, and gas. The perception of high risk among over 57% of professionals highlights the urgent need for robust security measures and strategies to protect critical infrastructure from cybersecurity threats and potential disruptions. Addressing these concerns through proactive security measures, risk assessments, and awareness training is essential for safeguarding ICS assets and ensuring the reliability and resilience of utility services.

More than 40% of utility companies do not have the trust and cooperation of other cybersecurity stakeholders.

The statistic “More than 40% of utility companies do not have the trust and cooperation of other cybersecurity stakeholders” indicates that a significant portion of utility companies are lacking effective collaboration with other entities involved in cybersecurity efforts. This suggests a concerning level of disconnect or disunity among stakeholders such as government agencies, other companies, and cybersecurity experts in the utility sector. The lack of trust and cooperation can hinder the collective ability to address cybersecurity threats and vulnerabilities effectively, potentially leaving utility companies and critical infrastructure at risk of cyberattacks or disruptions. It emphasizes the importance of fostering strong relationships and partnerships among cybersecurity stakeholders to enhance the overall security posture of utility companies and protect against cyber threats.

According to a study by Global Market Insights, by 2024, the cybersecurity market in energy and utility sector is expected to reach a worth of $8 billion.

The statistic from the study by Global Market Insights highlights the projected growth of the cybersecurity market within the energy and utility sector, with an anticipated value of $8 billion by the year 2024. This data suggests a significant increase in investment and emphasis on enhancing cybersecurity measures within these industries to protect critical infrastructure and sensitive information from cyber threats. The forecasted growth reflects the recognition of the increasing importance of cybersecurity practices in safeguarding the operations and data of energy and utility companies, as they continue to digitize and modernize their systems in an evolving technological landscape.

As per KPMG’s 2019 Global Power & Utilities Survey, about 48% of power and utility CEOs agree that becoming a victim of cyber attack is inevitable.

The statistic from KPMG’s 2019 Global Power & Utilities Survey reveals that nearly half, or 48%, of power and utility CEOs acknowledge the inevitability of experiencing a cyber attack. This finding highlights the growing recognition within the industry of the significant threat posed by cyber attacks. As critical infrastructure becomes increasingly digitized and interconnected, the potential vulnerabilities and risks associated with cyber attacks have become a major concern for CEOs in the power and utilities sector. The acknowledgment that cyber attacks are likely to occur underscores the importance of investing in robust cybersecurity measures to protect against, detect, and respond to such threats effectively.

64% of utilities companies said they had experienced at least one cybersecurity intrusion or attack in the last 12 months.

The statistic indicates that 64% of utilities companies reported encountering at least one cybersecurity intrusion or attack within the past 12 months. This highlights a significant cybersecurity threat faced by utilities companies, which are critical infrastructure providers. Such attacks could potentially disrupt services, compromise sensitive data, or even pose risks to public safety. The high percentage suggests a widespread vulnerability among utilities companies, underscoring the urgent need for robust cybersecurity measures and proactive strategies to protect against cyber threats in the rapidly evolving digital landscape.

According to a report by ABI Research, global cybersecurity spending for critical electricity infrastructure is expected to hit $12.2 billion by 2024.

The statistic from ABI Research highlights the projected growth in global cybersecurity spending specifically focused on critical electricity infrastructure, with an estimated expenditure of $12.2 billion by the year 2024. This figure indicates a significant increase in financial investment to enhance the security measures in place to safeguard crucial electricity infrastructure worldwide against cyber threats. As the reliance on digital technologies continues to grow in the energy sector, protecting critical infrastructure from potential cyber attacks becomes paramount. The anticipated rise in cybersecurity spending underscores the recognition of the importance of robust cybersecurity practices in ensuring the reliability and resilience of electricity systems essential for modern society.

76% of utility executives believe their country’s government would be unable to identify or protect their organization against a major cyber attack.

This statistic suggests that a significant majority (76%) of utility executives feel uncertain or lack confidence in their country’s government’s ability to detect and defend their organizations against a major cyber attack. This perception highlights potential gaps in cybersecurity measures and collaboration between the utilities sector and government agencies. The findings imply a lack of trust in existing cybersecurity frameworks and emphasize the need for stronger partnerships, improved communication, and enhanced strategies to safeguard critical infrastructure against cyber threats within the utilities industry.

Conclusion

Cybersecurity is a critical concern in the utilities industry, as demonstrated by the statistics presented in this blog post. It is clear that utility companies need to prioritize investment in robust cybersecurity measures to protect their infrastructure and sensitive information from cyber threats. Awareness of the risks, implementing best practices, and staying proactive in addressing potential vulnerabilities are key steps towards safeguarding the utilities sector from cyber attacks.

References

0. – https://www.techbeacon.com

1. – https://www.www.ey.com

2. – https://www.www.statista.com

3. – https://www.www2.deloitte.com

4. – https://www.www.inductiveautomation.com

5. – https://www.www.verizon.com

6. – https://www.www.securitymagazine.com

7. – https://www.newsroom.ibm.com

8. – https://www.www.rsa.com

9. – https://www.home.kpmg

10. – https://www.www.ibm.com

11. – https://www.www.entrust.com

12. – https://www.assets.new.siemens.com

13. – https://www.www.abiresearch.com

How we write our statistic reports:

We have not conducted any studies ourselves. Our article provides a summary of all the statistics and studies available at the time of writing. We are solely presenting a summary, not expressing our own opinion. We have collected all statistics within our internal database. In some cases, we use Artificial Intelligence for formulating the statistics. The articles are updated regularly.

See our Editorial Process.

Table of Contents

... Before You Leave, Catch This! 🔥

Your next business insight is just a subscription away. Our newsletter The Week in Data delivers the freshest statistics and trends directly to you. Stay informed, stay ahead—subscribe now.

Sign up for our newsletter and become the navigator of tomorrow's trends. Equip your strategy with unparalleled insights!