Data breaches cost organizations an average of 4.45 million dollars. Human error remains a factor in 95 percent of incidents while average detection and containment times stretch to 277 days. These patterns appear consistently across compliance failures, ransomware payments, and expanding attack surfaces.
Key Takeaways
- GDPR fines totaled €2.7 billion by 2023 per Enforcement Tracker.
- DDoS attacks rose 500% in 2023 per Cloudflare.
- The average cost of a data breach in 2023 reached $4.45 million, marking a 15% increase over the past three years according to IBM's Cost of a Data Breach Report.
- AI threats awareness low at 24% per ISC2.
- 64% encryption adoption rate in enterprises per nCipher survey.
- 87% of employees failed phishing test per Proofpoint.
Organizations can reduce breaches significantly by prioritizing data security measures and better access controls.
Related reading
01 · Category
Compliance and Costs21 stats
01
GDPR fines totaled €2.7 billion by 2023 per Enforcement Tracker.
02
Average GDPR fine €1.7 million per incident per DLA Piper.
03
92% of firms increased security budgets post-breach per Ponemon.
04
CCPA violations fined $1.2 million average per Osano.
05
68% of breaches cost over $1 million per IBM 2023.
06
HIPAA fines reached $6.8 million average for large breaches per HHS.
07
77% of CISOs report compliance as top priority per Deloitte.
08
Post-breach notification costs $0.31-$5.64 per record per Ponemon.
09
SOX compliance costs $2.3 million annually for public cos per FEI.
10
41% of orgs fined for non-compliance in 2023 per Risk Based Security.
11
Detection costs 31% of total breach expenses per IBM.
12
PCI DSS non-compliance fines up to $100k/month per Visa.
13
55% budget increase for compliance post-GDPR per IAPP.
14
Notification within 72 hours required by GDPR, 83% comply per IAPP.
15
Average litigation cost $1.6 million per breach per IBM.
16
96 countries have data protection laws per UNCTAD 2023.
17
Fines represent 10% of breach costs on average per IBM.
18
62% of CISOs worried about regulatory changes per PwC.
19
Remediation costs $1.58 million average per IBM 2023.
20
45% of breaches led to regulatory investigations per Verizon.
21
EU fines for cookies consent €20 million+ per CNIL.
Interpretation
Compliance and Costs Interpretation
The data screams that while compliance has become a costly and all-consuming corporate obsession, the true financial hemorrhage lies in the breach itself, where fines are merely the splashy headline atop a deep, expensive pool of detection, notification, litigation, and remediation.
02 · Category
Cyber Threats28 stats
01
DDoS attacks rose 500% in 2023 per Cloudflare.
02
2,365 DDoS attacks per day on average in 2023 per Cloudflare.
03
Ransomware payments averaged $1.54 million in 2023 per Sophos.
04
75% of organizations hit by ransomware in 2023 per Sophos State of Ransomware.
05
Phishing attacks increased 58% in 2023 per Proofpoint.
06
300,000 new malware samples daily in 2023 per AV-TEST.
07
91% of cyberattacks start with phishing email per State of the Phish 2023.
08
IoT devices targeted in 30% more attacks in 2023 per SonicWall.
09
Cryptojacking incidents up 89% in 2023 per SonicWall.
10
5.3 billion phishing emails sent daily per Keepnet.
11
Zero-day exploits used in 25% of attacks per Google TAG 2023.
12
Mobile malware up 17% to 6.52 million samples in 2023 per Kaspersky.
13
Supply chain attacks doubled to 125 incidents in 2023 per CISA.
14
97% of businesses experienced phishing attempts in 2023 per Barracuda.
15
BEC scams caused $2.9 billion losses in 2023 per FBI IC3.
16
1 in 10 organizations faced nation-state attacks in 2023 per CrowdStrike.
17
Deepfake incidents rose 550% in 2023 per Sumsub.
18
80% of breaches involved brute force or credential stuffing per Akamai.
19
Android malware grew 8% to 5.52 million in 2023 per Check Point.
20
4.2 million attacks on healthcare in 2023 per Orca Security.
21
MFA fatigue attacks up 346% in 2023 per Proofpoint.
22
68% of organizations hit by supply chain compromise per ENISA 2023.
23
Botnets launched 7.9 billion attacks in 2023 per Imperva.
24
99% of firewalls vulnerable to attacks per Automox study.
25
83% increase in vishing attacks in 2023 per KnowBe4.
26
2.9 million phishing sites blocked in 2023 per APWG.
27
76% of CISOs fear AI-powered attacks per ISC2 survey.
28
Quantum computing threats to encryption by 2030 per NIST.
Interpretation
Cyber Threats Interpretation
If you feel overwhelmed by the fact that nearly every cyber threat imaginable skyrocketed last year, you’re not paranoid—you’re just paying attention.
03 · Category
Data Breaches30 stats
01
The average cost of a data breach in 2023 reached $4.45 million, marking a 15% increase over the past three years according to IBM's Cost of a Data Breach Report.
02
In 2023, 82% of organizations experienced at least one data breach, up from 76% in 2022 per Verizon's DBIR.
03
Healthcare data breaches cost an average of $10.93 million in 2023, the highest among industries per IBM.
04
Over 5,000 data breaches were reported in the US in 2023 by Identity Theft Resource Center.
05
74% of breaches involved a human element like phishing per Verizon DBIR 2023.
06
The global average time to identify and contain a breach was 277 days in 2023 per IBM.
07
Ransomware attacks caused 20% of breaches in 2023 according to Verizon.
08
83% of breaches involved external actors per Verizon DBIR 2023.
09
Financial services breaches averaged $5.9 million in costs per IBM 2023 report.
10
16,000+ US data records exposed per day on average in 2022 per ITRC.
11
95% of cybersecurity issues due to human error per Stanford University study.
12
Equifax breach exposed 147 million records in 2017 per FTC report.
13
88% of organizations faced ransomware in 2023 per Sophos survey.
14
Average breach cost in retail sector was $3.37 million in 2023 per IBM.
15
2.6 billion personal records exposed in breaches in first half of 2023 per Surfshark.
16
43% of breaches exploited stolen credentials per Verizon 2023.
17
Public cloud breaches cost $4.75 million on average per IBM 2023.
18
28% increase in supply chain breaches in 2023 per Verizon.
19
Marriott breach in 2018 exposed 500 million guest records per company disclosure.
20
99% of breaches involved AWS S3 misconfigurations in some cases per UpGuard.
21
Phishing was initial access in 44% of breaches per Verizon DBIR 2023.
22
Average cost of insider-related breach was $4.9 million per IBM 2023.
23
1,800+ health records breaches in 2023 per HHS.
24
Capital One breach exposed 100 million records in 2019 per company.
25
60% of small businesses fail after cyber attack per US National Cyber Security Centre.
26
Lost business costs 36% of total breach cost per IBM 2023.
27
22 billion records leaked in 2023 per LeakCheck database.
28
System intrusion pattern in 29% of breaches per Verizon 2023.
29
Average detection time for breaches dropped to 204 days for AI users per IBM.
30
MOVEit breaches affected 62 million individuals in 2023 per HHS.
Interpretation
Data Breaches Interpretation
If the price of complacency feels steep at $4.45 million per breach, remember that the real cost is a human-shaped hole in your defenses, through which most attacks patiently walk while your data leisurely bleeds out for 277 days.
More related reading
04 · Category
Future Trends20 stats
01
AI threats awareness low at 24% per ISC2.
02
Quantum threats to RSA by 2035 per IBM.
03
5G attacks expected to rise 300% per GSMA.
04
85% of firms plan zero-trust by 2025 per Forrester.
05
AI-driven attacks to dominate 75% by 2025 per Gartner.
06
Ransomware-as-a-Service to grow 50% yearly per Chainalysis.
07
IoT devices to be 75 billion by 2025, 25% insecure per Statista.
08
Deepfake fraud to cost $40 billion by 2027 per Juniper.
09
Supply chain risks to affect 45% more orgs by 2025 per Gartner.
10
Post-quantum crypto standards finalized 2024 per NIST.
11
Cloud breaches to rise 150% by 2025 per Palo Alto.
12
90% of new attacks use AI by 2025 per McAfee.
13
Metaverse security market to $100B by 2030 per MarketsandMarkets.
14
6G to introduce new attack vectors by 2030 per Ericsson.
15
Biometric spoofing attacks up 200% by 2025 per ID R&D.
16
Edge computing vulnerabilities to triple per IDC.
17
80% of enterprises adopt AI security by 2026 per IDC.
18
Cyber insurance premiums up 50% by 2025 per Marsh.
19
Autonomous vehicle hacks to rise per Upstream.
20
50% of attacks unpatchable by 2025 per Black Duck.
Interpretation
Future Trends Interpretation
It seems we’re confidently sprinting toward a future where nearly everything is hackable, yet we’re largely unprepared and only mildly aware of the specific threats, which is an impressive feat of collective optimism.
05 · Category
Security Technologies21 stats
01
64% encryption adoption rate in enterprises per nCipher survey.
02
Zero-trust implementations grew 50% in 2023 per Zscaler.
03
94% of organizations use multi-factor authentication per Microsoft 2023.
04
AI-based threat detection reduced breach costs by $2.22 million per IBM.
05
78% of companies use EDR tools per Ponemon 2023.
06
Endpoint encryption used by 89% of large enterprises per Thales.
07
Cloud security posture management adopted by 62% per Gartner.
08
55% reduction in phishing success with DMARC per Valimail.
09
SIEM tools in 76% of SOCs per SANS Institute.
10
Passwordless authentication pilots in 35% of firms per Okta.
11
92% effectiveness of behavioral analytics in fraud detection per Nuance.
12
DLP solutions prevented 87% of data exfiltration per Forcepoint.
13
45% of orgs use SASE architecture per Cato Networks.
14
Quantum-safe encryption tested by 23% of enterprises per Entrust.
15
81% use next-gen firewalls per Palo Alto Networks survey.
16
XDR platforms reduced MTTD by 55% per Gartner.
17
67% deployed CASBs for SaaS security per Netskope.
18
Biometric auth success rate 99.9% vs passwords per Aware.
19
70% incident reduction with SOAR per IBM study.
20
88% use antivirus/EDR on endpoints per Sophos.
21
Blockchain for data integrity adopted by 15% per Deloitte.
Interpretation
Security Technologies Interpretation
While enterprises are commendably bolting the doors with widespread encryption and multi-factor authentication, the fact that less than a quarter have even tested quantum-safe crypto reveals we're still alarmingly busy winning yesterday's security battles while the future's threats are already at the gate.
06 · Category
User Awareness and Training28 stats
01
87% of employees failed phishing test per Proofpoint.
02
95% of breaches involve human error per Cybint.
03
Only 26% of employees receive regular security training per SANS.
04
Phishing simulation training reduces clicks by 90% per KnowBe4.
05
74% of breaches from social engineering per Verizon DBIR.
06
22% of users share passwords per LastPass study.
07
Security awareness training ROI 300% per ROI Institute.
08
91% of attacks via email per Google.
09
Only 52% report phishing attempts per Proofpoint.
10
Password reuse by 59% of users per NordPass.
11
Training reduced incidents by 70% per NIST study.
12
Awareness programs cut costs by $1.2M per breach per IBM.
13
Remote workers 3x more likely phished per Verizon.
14
82% don't recognize spear-phishing per Proofpoint.
15
Gamified training improves retention 90% per Terranova.
16
68% use same password across sites per Dashlane.
17
47% of employees bypass security policies per Varonis.
18
Annual training mandatory for 65% compliance per ISACA.
19
Social media phishing fools 65% per Wombat Security.
20
85% awareness gap in SMEs per CybSafe.
21
MFA ignored by 30% despite training per Microsoft.
22
40% don't update software per Keeper Security.
23
Training ROI up to 4.8x per Aberdeen Group.
24
96% success in bypassing MFA via social engineering per Microsoft.
25
57% of millennials share credentials per Deloitte.
26
Only 29% trained quarterly per Gartner.
27
USB drop attacks succeed 45% without training per Infosec.
28
70% reduction in errors post-training per Keepnet.
Interpretation
User Awareness and Training Interpretation
We're patching servers with the vigilance of elite commandos while leaving the front door propped open with a sticky note that says "Password123," because our most sophisticated threat vector remains the magnificently distractible human being.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Priya Chandrasekaran. (2026, February 13). Data Security Statistics. Gitnux. https://gitnux.org/data-security-statistics
MLA
Priya Chandrasekaran. "Data Security Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/data-security-statistics.
Chicago
Priya Chandrasekaran. 2026. "Data Security Statistics." Gitnux. https://gitnux.org/data-security-statistics.
Sources & references
90 datasets cited across this report · attribution is report-level
akamai.com