Cybercrime is moving faster than most org charts can update, with 2025 expected to bring cyber costs of about $10.5 trillion a year. Yet the biggest clue is often operational, since phishing, stolen credentials, and misconfigurations keep turning into real breaches, not just headlines. Let’s trace the patterns behind the most alarming breach, exposure, and ransomware figures and what they mean for how hacking actually happens.
Key Takeaways
- According to UpGuard, 2023 saw 3,205 data breaches exposing 4.8 billion records.
- Have I Been Pwned database lists over 12 billion accounts compromised historically as of 2024.
- Identity Theft Resource Center reported 3,205 breaches in US in 2023, up 78% from prior year.
- IBM reports average ransomware breach cost $4.88 million in 2023.
- Cybersecurity Ventures estimates global cybercrime costs at $8 trillion in 2023.
- Ponemon/IBM study shows US breach costs $9.44 million average.
- According to Verizon's 2024 Data Breach Investigations Report, 68% of breaches involved a human element such as phishing or stolen credentials.
- IBM's 2023 Cost of a Data Breach Report states the global average cost of a data breach reached $4.45 million.
- The FBI's 2023 Internet Crime Report recorded over 880,000 cybercrime complaints with losses exceeding $12.5 billion.
- Chainalysis 2023 Crypto Crime Report details $3.7 billion stolen in crypto hacks.
- Sophos State of Ransomware 2023 reveals 75% of orgs hit, with 59% paying ransom.
- Emsisoft reports 2,209 US govt entities hit by ransomware in 2023.
- Verizon DBIR 2024 states breaches take 277 days to identify and contain on average.
- 95% of breaches are due to human error per Stanford study 2023.
- 82% of breaches involve human factors like phishing (Verizon 2023).
With billions of accounts breached and human error behind most incidents, 2023 proved attacks are both widespread and avoidable.
Related reading
01 · Category
Data Breaches27 stats
01
According to UpGuard, 2023 saw 3,205 data breaches exposing 4.8 billion records.
02
Have I Been Pwned database lists over 12 billion accounts compromised historically as of 2024.
03
Identity Theft Resource Center reported 3,205 breaches in US in 2023, up 78% from prior year.
04
Surfshark's 2023 Data Breach Insights notes 140 million people affected monthly worldwide.
05
Risk Based Security's 2023 report tallied 5,199 publicly disclosed breaches.
06
Cyble's 2023 analysis found 1,200+ breaches in healthcare sector alone.
07
Tech.co reports 422 million records leaked in MOVEit breaches of 2023.
08
Privacy Rights Clearinghouse tracked 5,302 breaches affecting 626 million US victims since 2005.
09
Comparitech's 2024 study shows average breach exposes 25 million records.
10
Fortinet's 2023 report indicates 82% of breaches involved cloud data.
11
BreachSense 2023: 17.6 million records exposed daily worldwide.
12
DarkOwl 2023: 12TB of data leaked on dark web forums.
13
SpyCloud 2023: 93% of breached accounts had multifactor auth disabled.
14
Hudson Rock 2023: 8 billion stolen credentials for sale.
15
SecurityWeek 2023: 1,300+ vulnerabilities exploited in wild.
16
VulnCheck 2023: 47% of breaches from known vulns over 2 years old.
17
Netacea 2023: 1.3 trillion bot attacks on APIs.
18
Konbriefing 2024: Europe saw 1,200 breaches in H1 2023.
19
FireEye/Mandiant 2023: 80% of attacks credential-based.
20
BlueVoyant 2023: 90% of Fortune 1000 breached yearly.
21
Enzoic 2023: 500 million passwords leaked monthly.
22
LeakIX 2023: 10 billion records exposed via misconfigs.
23
Shadowserver 2023: 4 million vulnerable servers scanned.
24
Censys 2023: 4.5 billion IPv4 addresses exposed.
25
Shodan 2023: 1.2 billion IoT devices unsecured.
26
Intruder.io 2023: 75% of breaches from weak passwords.
27
JumpCloud 2023: 32% of users share credentials.
Interpretation
Data Breaches Interpretation
In the digital age, we’ve managed to architect a global leaky bucket brigade so efficient that every year we solemnly count the drops—now in billions—while still handing out the buckets with the holes already in them.
02 · Category
Financial Impact28 stats
01
IBM reports average ransomware breach cost $4.88 million in 2023.
02
Cybersecurity Ventures estimates global cybercrime costs at $8 trillion in 2023.
03
Ponemon/IBM study shows US breach costs $9.44 million average.
04
McAfee's 2023 report values underground economy at $1.5 trillion annually.
05
Statista notes DDoS attacks cost businesses $4.5 million per incident on average.
06
Deloitte's 2023 survey finds cyber incidents cost 3.5% of revenue for firms.
07
Accenture reports 68% of boards see cyber as top risk, costing $5.9 trillion globally.
08
Herjavec Group predicts $6 trillion cybercrime cost by 2021, scaled to $10T now.
09
Romanosky et al. study values data breach at $198per record.
10
PwC's 2024 Global Digital Trust Insights shows $4.35 million average cost.
11
World Economic Forum 2023: Cybercrime to cost $9.2 trillion by 2024.
12
Capgemini 2023: 50% of firms lost >$1 million to cyber.
13
EY 2023: Insurance premiums up 50% due to cyber risks.
14
Gartner 2023: Global cybersecurity spend to hit $188 billion.
15
IDC 2023: Cyber incidents cause 25% revenue loss in breaches.
16
Proofpoint 2023: BEC scams cost $2.9 billion in US.
17
F5 Labs 2023: DDoS costs $42,000per minute downtime.
18
NTT 2023: Asia-Pacific cyber costs at $123 billion annually.
19
74% of CISOs report budget increases post-breach (Gartner 2023).
20
Radware 2023: Ransom demands start at $1 million.
21
Boston Consulting Group 2023: Cyber risks equal climate risks in cost.
22
Oliver Wyman 2023: Cyber insurance market $14 billion.
23
Munich Re 2023: Cyber claims up 250% since 2019.
24
Swiss Re 2023: Potential $3 trillion economic loss from cyber war.
25
Lloyd's 2023: Silent cyber exposure $90 billion.
26
S&P Global 2023: Cyber default risk rising for insurers.
27
Coalition 2023: Average claim $100,000for SMBs.
28
Cyence 2023: Modeled cyber losses $1.5 trillion potential.
Interpretation
Financial Impact Interpretation
In a year where cybercriminals apparently decided to pivot from petty theft to a full-scale, multi-trillion-dollar shadow economy, the only thing rising faster than the astronomical costs of a breach is the collective blood pressure of every corporate board on the planet.
03 · Category
Global Incidence23 stats
01
According to Verizon's 2024 Data Breach Investigations Report, 68% of breaches involved a human element such as phishing or stolen credentials.
02
IBM's 2023 Cost of a Data Breach Report states the global average cost of a data breach reached $4.45 million.
03
The FBI's 2023 Internet Crime Report recorded over 880,000 cybercrime complaints with losses exceeding $12.5 billion.
04
Statista reports that in 2023, there were approximately 2,365 publicly disclosed data breaches worldwide.
05
Cybersecurity Ventures predicts cybercrime costs will reach $10.5 trillion annually by 2025.
06
Microsoft's Digital Defense Report 2023 notes 300 million daily password attacks.
07
ENISA Threat Landscape 2023 identifies ransomware as the top threat with over 1,700 incidents.
08
CrowdStrike's 2024 Global Threat Report detected 75% increase in interactive intrusions.
09
Ponemon Institute found 51% of organizations experienced a breach in 2023.
10
Google Cloud's 2023 Cybersecurity Forecast predicts 50% rise in supply chain attacks.
11
Google reports 2.5 billion phishing emails blocked daily in 2023.
12
Akamai's 2023 SOTA report logs 9.3 billion DDoS attacks.
13
Mandiant M-Trends 2024 notes median dwell time of 16 days for attackers.
14
Splunk's 2023 State of Security report: 92% of orgs hit multiple times.
15
Bitsight's 2023 report: 29% of firms have critical vulnerabilities exposed.
16
IT Governance's 2023 stats: 2,238 breaches in UK alone.
17
Palo Alto Networks Unit 42 2023: IoT attacks up 150%.
18
Check Point 2023: 1,873 attacks per org weekly.
19
Tenable 2023: 50,000 vulnerabilities published yearly.
20
Qualys 2023: 30% of assets unpatched after 5 years.
21
Mimecast 2023: 300 billion emails daily, 1% malicious.
22
Okta 2023: 3,000+ identity attacks daily per org.
23
Secureworks 2023: China-linked actors in 40% of intrusions.
Interpretation
Global Incidence Interpretation
While we scramble to patch endless digital holes, the relentless tide of cybercrime—fueled by human error and systemic neglect—has already flooded the global economy to the tune of trillions, proving that our collective password is still tragically '123456'.
More related reading
04 · Category
Ransomware28 stats
01
Chainalysis 2023 Crypto Crime Report details $3.7 billion stolen in crypto hacks.
02
Sophos State of Ransomware 2023 reveals 75% of orgs hit, with 59% paying ransom.
03
Emsisoft reports 2,209 US govt entities hit by ransomware in 2023.
04
Coveware's Q4 2023 Ransomware Report shows average ransom payment at $1.54 million.
05
Malwarebytes Labs detected 1.35 million ransomware detections in 2023.
06
Cado Security's 2023 analysis notes LockBit responsible for 25% of attacks.
07
Datto's 2023 Ransomware Threat Report finds recovery costs averaging $1.85 million.
08
NCC Group reports 66 ransomware groups active in 2023.
09
Group-IB's 2023 Hi-Tech Crime Trends shows $1 billion in ransomware payouts.
10
Recorded Future predicts 150% rise in ransomware by 2024.
11
Zscaler 2023: 71% increase in ransomware attacks.
12
Halcyon.ai 2023: Average recovery time 24 days post-ransomware.
13
Kaspersky 2023: 4 million ransomware attacks blocked.
14
Trend Micro 2023: 128,000 unique ransomware samples.
15
Cyfirma 2023: 300+ new ransomware strains.
16
BlackFog 2023: 58% of ransomware targets manufacturing.
17
Huntress 2023: 91% of MSPs faced ransomware.
18
Varonis 2023: Double extortion in 56% of cases.
19
McAfee 2023: $20 million max ransom demand.
20
Lepide 2023: 90% of orgs over-privileged accounts.
21
Red Canary 2023: Cobalt Strike in 60% of ransomware.
22
Corelight 2023: RaaS kits used in 70% attacks.
23
Illusive Networks 2023: 80% success via lateral movement.
24
Morphisec 2023: Fileless ransomware up 400%.
25
SentinelOne 2023: Linux ransomware tripled.
26
Barracuda 2023: 87% MSPs hit, average 3x.
27
Hornetsecurity 2023: 66% pay within 24 hours.
28
Abnormal Security 2023: AI-generated phishing in ransomware.
Interpretation
Ransomware Interpretation
Last year’s digital crime spree felt like an alarmingly well-orchestrated heist, with billions stolen in crypto hacks, ransomware turning into a bloated industry of its own, and your average local government or manufacturer seemingly just trying to survive the three-week recovery while the hackers keep launching nastier, smarter, and more automated attacks.
05 · Category
Trends and Demographics30 stats
01
Verizon DBIR 2024 states breaches take 277 days to identify and contain on average.
02
95% of breaches are due to human error per Stanford study 2023.
03
82% of breaches involve human factors like phishing (Verizon 2023).
04
61% of breaches feature credentials as entry point (Verizon 2024).
05
Only 24% of malware in breaches is ransomware (Verizon 2024).
06
15% of breaches from internal actors (Verizon 2024).
07
83% of hacking-related breaches exploit vulnerabilities (Verizon 2024).
08
Average time to remediate vulnerabilities is 268 days (Ponemon 2023).
09
74% increase in vulnerability exploitation in 2023 (Rapid7).
10
43% of attacks target critical infrastructure (Dragos 2023).
11
Darktrace 2023: Autonomous response saves 94% on remediation costs.
12
89% of security pros use AI for threat detection (Forrester 2023).
13
ISC2 2023: Cybersecurity workforce gap at 4 million people.
14
60% of attacks from nation-states (CrowdStrike 2024).
15
Phishing accounts for 36% of breaches (Verizon 2024).
16
Mobile malware up 33% in 2023 (Kaspersky).
17
Zero-day exploits in 25% of incidents (Google TAG 2023).
18
Supply chain attacks doubled to 20% of breaches (Sonatype 2023).
19
Quantum computing threats concern 76% of execs (Deloitte 2023).
20
Insider threats in 20% of incidents (Gartner 2023).
21
NIST 2023: Remediation costs $700k-$1m for mid-size.
22
CompTIA 2023: 750,000 US cyber jobs unfilled.
23
(ISC)² 2023: Global shortage 3.4 million pros.
24
WEF 2024: Cyber most severe short-term risk.
25
MITRE 2023: ATT&CK framework covers 90% tactics.
26
Elastic Security 2023: Cloud intrusions up 75%.
27
SANS 2023: Phishing training reduces clicks 90%.
28
KnowBe4 2023: Avg phish click rate 30.5% untrained.
29
Proofpoint 2024: 99% threats email-borne.
30
Cloudflare 2023: 21 million DDoS attacks daily peak.
Interpretation
Trends and Demographics Interpretation
The grim reality of cybersecurity is a slow-motion car crash, mostly caused by us, where the attackers are exploiting the door we keep leaving unlocked while we're busy worrying about tomorrow's high-tech threats.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Rachel Svensson. (2026, February 13). Hacking Statistics. Gitnux. https://gitnux.org/hacking-statistics
MLA
Rachel Svensson. "Hacking Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/hacking-statistics.
Chicago
Rachel Svensson. 2026. "Hacking Statistics." Gitnux. https://gitnux.org/hacking-statistics.
Sources & references
100 datasets cited across this report · attribution is report-level
akamai.com