IoT is scaling fast, but security is struggling to keep up—from smart consumer products to industrial and healthcare systems that must stay reliable. In 2023, 1.5 billion IoT devices were actively targeted, while DDoS attacks using IoT botnets made up 35% of all DDoS incidents in Q4. We break down common failure points—from unsecured remote access and weak encryption to known vulnerabilities—and what breaches can cost across sectors, including rising ransomware impact.
Key Takeaways
- In 2023, 1.5 billion IoT devices were actively targeted by cyber attacks, representing a 25% increase from 2022
- DDoS attacks leveraging IoT botnets accounted for 35% of all DDoS incidents in Q4 2023, with Mirai variants still dominant
- 60% of IoT security breaches in manufacturing involved unsecured remote access points in 2023
- Global IoT devices reached 15.9 billion in 2023, with 75% unsecured
- Consumer IoT devices grew to 8.4 billion units by 2023, 60% lacking encryption
- Industrial IoT endpoints hit 12 million in manufacturing alone 2023
- Average cost of IoT breach reached $4.35 million in 2023, up 15%
- Healthcare IoT breaches cost $10.1 million per incident on average 2023
- Manufacturing IoT downtime from attacks cost $1.2M hourly globally
- 55% of organizations predict IoT attacks double by 2025
- IoT devices to hit 29 billion by 2030, 90% needing AI security
- Quantum threats to IoT encryption by 2028 affect 70% devices
- Over 15,000 unique IoT vulnerabilities disclosed in 2023 by CVE
- 80% of IoT devices ship with known vulnerabilities from CVE lists in 2023
- Firmware vulnerabilities in routers affected 1 in 3 devices scanned in 2023
In 2023, IoT security risks surged as billions of devices were attacked, with breaches, ransomware, and DDoS costs rising fast.
Related reading
01 · Category
Attack Statistics29 stats
01
In 2023, 1.5 billion IoT devices were actively targeted by cyber attacks, representing a 25% increase from 2022
02
DDoS attacks leveraging IoT botnets accounted for 35% of all DDoS incidents in Q4 2023, with Mirai variants still dominant
03
60% of IoT security breaches in manufacturing involved unsecured remote access points in 2023
04
Ransomware attacks on IoT ecosystems rose by 150% year-over-year in healthcare sector, affecting 12,000 devices
05
Smart home devices faced 2.3 million brute-force login attempts daily in 2023
06
28% of enterprise IoT deployments experienced phishing-induced compromises in 2022-2023
07
IoT malware samples increased to 15 million unique variants by end of 2023
08
75% of IoT attack traffic originated from Asia-Pacific regions in H1 2023
09
Critical infrastructure IoT saw 400% surge in state-sponsored attacks in 2023
10
52% of retail IoT devices were hit by supply chain attacks in 2023 surveys
11
Automotive IoT fleets reported 1.2 million telematics hacks annually
12
68% of energy sector IoT attacks used zero-day exploits in 2023
13
Consumer IoT devices comprised 80% of botnet recruitment in 2023 DDoS campaigns
14
91% of organizations faced at least one IoT-related attack in 2023
15
Mobile IoT attacks grew 300% with 5G rollout, hitting 500 million incidents
16
45% of IoT attacks targeted firmware vulnerabilities in industrial controls
17
Gaming consoles as IoT faced 120 million exploit attempts in 2023
18
33% increase in IoT spoofing attacks on location-based services in 2023
19
Healthcare wearables saw 2 million man-in-the-middle attacks quarterly
20
70% of logistics IoT trackers compromised via GPS signal jamming in 2023
21
Agriculture IoT drones experienced 15,000 hijacking attempts monthly
22
55% of hospitality IoT breaches from smart lock exploits in 2023
23
Education sector IoT smart boards hit by 800k ransomware bids yearly
24
62% of finance IoT ATMs vulnerable to skimming via network attacks
25
Environmental sensors in cities faced 1.5M DoS attacks in 2023
26
48% rise in IoT voice assistant eavesdropping hacks
27
Retail POS IoT terminals saw 3M card skimming attempts
28
Transportation IoT traffic lights disrupted 250 times daily globally
29
Waste management IoT bins hacked for data theft 40k times in 2023
Interpretation
Attack Statistics Interpretation
Across attack statistics, 1.5 billion IoT devices were targeted in 2023, a 25% jump from 2022, showing that IoT is becoming a bigger focal point for escalating threats.
02 · Category
Device Adoption And Risks28 stats
01
Global IoT devices reached 15.9 billion in 2023, with 75% unsecured
02
Consumer IoT devices grew to 8.4 billion units by 2023, 60% lacking encryption
03
Industrial IoT endpoints hit 12 million in manufacturing alone 2023
04
82% of enterprises plan IoT expansion but cite security as top barrier 2023
05
Smart home IoT adoption at 40% US households, 70% with misconfigs
06
Healthcare IoT devices projected 25 billion by 2025, currently 50% risky
07
Automotive connected cars reached 300 million, 65% telematics insecure
08
Agriculture IoT sensors deployed 1.2 billion, 55% unpatched
09
Retail IoT like beacons at 4 billion, 80% privacy risks
10
Energy smart grids with 2.5 billion IoT nodes, 45% legacy risks
11
Logistics IoT trackers 500 million active, 60% spoofable
12
68% of SMBs adopted IoT without security assessments 2023
13
City IoT sensors exceeded 1 billion, 75% DoS vulnerable
14
Education IoT devices in schools 200 million, 90% outdated firmware
15
Hospitality IoT rooms equipped 40%, 70% guest data exposed
16
Finance IoT branches 100k smart ATMs, 50% skimmable
17
Waste IoT bins 50 million deployed, 65% remote takeover risks
18
Gaming IoT consoles 250 million, 55% botnet recruits
19
Environmental monitoring IoT 300 million sensors, 80% unsecured APIs
20
Voice assistants in 500 million homes, 60% eavesdropping risks
21
EV IoT chargers 10 million globally, 45% auth bypass
22
Fitness IoT wearables 1 billion users, 70% BLE leaks
23
Industrial robots IoT 3 million units, 75% network exposed
24
Smart meters 1.5 billion installed, 50% rollback vulns
25
Drones IoT commercial 5 million, 65% signal jam risks
26
HVAC IoT systems 800 million controllers, 55% RCE exposed
27
POS IoT terminals 90 million, 60% magstripe vulns
28
Irrigation IoT 200 million valves, 70% command injection
Interpretation
Device Adoption And Risks Interpretation
As IoT adoption surges with 15.9 billion devices in 2023 and large shares unsecured or unprotected, device risk is keeping pace with growth, such as 75% lacking security and 60% of consumer devices missing encryption, making Device Adoption And Risks a clear and urgent battleground in sectors from smart homes to healthcare.
03 · Category
Financial Impact25 stats
01
Average cost of IoT breach reached $4.35 million in 2023, up 15%
02
Healthcare IoT breaches cost $10.1 million per incident on average 2023
03
Manufacturing IoT downtime from attacks cost $1.2M hourly globally
04
Retail IoT POS breaches averaged $3.5M in losses 2023
05
Energy sector IoT incidents led to $8B in global damages 2023
06
Automotive IoT hacks caused $2.4B insurance claims 2023
07
Global IoT cyber insurance premiums rose 40% to $15B in 2023
08
SMB IoT breaches averaged $25k recovery, 60% bankruptcies
09
Logistics IoT disruptions cost $50B in supply chain delays 2023
10
Agriculture IoT failures led to $3B crop losses 2023
11
Hospitality IoT breaches $4.8M average with reputational harm
12
Finance IoT ATM hacks $1.5B fraudulent transactions 2023
13
City IoT outages $2B infrastructure repair costs 2023
14
Education IoT ransomware demands averaged $1M per school 2023
15
Environmental IoT tampering $500M false data penalties
16
Gaming IoT DDoS downtime cost developers $300M 2023
17
Wearables IoT data breaches $2M per million records 2023
18
Smart home IoT claims $1.8B insurance payouts 2023
19
EV charger IoT failures $400M fleet downtime 2023
20
Drone IoT losses $250M in crashed assets 2023
21
Robot IoT malfunctions $1B manufacturing halts 2023
22
Meter IoT theft enabled $6B energy fraud 2023
23
HVAC IoT hacks $900M comfort claims 2023
24
Irrigation IoT errors $1.5B water waste fines
25
Voice IoT privacy suits $500M settlements 2023
Interpretation
Financial Impact Interpretation
In the Financial Impact category, IoT breaches are getting costlier, with the average cost jumping to $4.35 million in 2023 while sectors like energy suffered $8B in global damages and automotive generated $2.4B in insurance claims.
More related reading
04 · Category
Future Projections27 stats
01
55% of organizations predict IoT attacks double by 2025
02
IoT devices to hit 29 billion by 2030, 90% needing AI security
03
Quantum threats to IoT encryption by 2028 affect 70% devices
04
5G IoT security spending to reach $40B annually by 2027
05
Edge AI for IoT security adoption at 80% enterprises by 2026
06
Ransomware on IIoT projected 400% increase by 2025
07
Zero-trust IoT models mandatory for 60% regs by 2027
08
Blockchain IoT security market $20B by 2028 growth
09
AI-driven IoT attacks to comprise 50% by 2026
10
Post-quantum crypto for IoT standard by 2027 in 75% devices
11
IoT security-as-a-service market $15B by 2027 CAGR 25%
12
6G IoT vulnerabilities expected 3x higher than 5G by 2030
13
Federated learning secures 40% distributed IoT by 2028
14
Supply chain IoT attacks 5x by 2026 per CISA forecast
15
Homomorphic encryption in IoT privacy by 2030 for 30%
16
Digital twins reduce IoT risks 50% adoption by 2027
17
SBOM mandatory for 90% IoT firmware by 2028 regs
18
Neuromorphic chips secure 25% edge IoT by 2030
19
Global IoT cyber workforce shortage 3.5M by 2025
20
Satellite IoT security flaws impact 20B devices by 2030
21
Self-healing IoT networks in 35% critical infra by 2028
22
Metaverse IoT integrations risky for 1B users by 2027
23
Carbon-aware IoT security optimizes 50% green data by 2030
24
Swarm robotics IoT vulns projected 10x by 2028
25
Confidential computing for IoT clouds 60% by 2027
26
XR IoT devices 2B units insecure risks by 2030
27
DeFi IoT integrations fraud $10B losses projected 2028
Interpretation
Future Projections Interpretation
As future projections show, IoT security is set to face major escalation with 55% of organizations expecting attacks to double by 2025 and IIoT ransomware projected to rise 400% by then, making advanced defenses a near term necessity rather than a long term plan.
05 · Category
Vulnerability Statistics29 stats
01
Over 15,000 unique IoT vulnerabilities disclosed in 2023 by CVE
02
80% of IoT devices ship with known vulnerabilities from CVE lists in 2023
03
Firmware vulnerabilities in routers affected 1 in 3 devices scanned in 2023
04
95% of IoT medical devices have high-severity vulnerabilities per FDA 2023
05
Buffer overflow flaws in 45% of industrial IoT controllers
06
70% of smart cameras expose UPnP vulnerabilities openly
07
Cryptographic weaknesses in 60% of IoT chipsets from 2023 audits
08
SQL injection risks in 25% of web-facing IoT dashboards
09
40% of wearables lack secure boot mechanisms
10
Heartbleed-like flaws persist in 30% legacy IoT devices 2023
11
55% of smart meters have hardcoded credentials vulnerabilities
12
Path traversal exploits in 35% of IoT gateways tested
13
65% of automotive ECUs show deserialization flaws
14
Command injection in 50% of irrigation controllers
15
75% of VoIP IoT phones vulnerable to SIP hijacking
16
XXE vulnerabilities in 20% of IoT XML parsers
17
85% of budget smart bulbs have TLS downgrade risks
18
RCE flaws in 42% of HVAC IoT thermostats
19
58% of POS IoT devices susceptible to BlueBorne
20
Insecure deserialization in 38% of cloud-connected IoT
21
67% of drones have GPS spoofing vulnerabilities
22
Prototype pollution in 22% of Node.js IoT apps
23
72% of legacy SCADA IoT with unpatched Modbus flaws
24
Open redirect issues in 30% of IoT management portals
25
49% of fitness trackers leak PII via BLE vulns
26
CSRF in 41% of authenticated IoT web interfaces
27
76% of industrial robots have weak authentication vulns
28
24% of smart fridges expose SMB vulns
29
53% of EV chargers with SSRF vulnerabilities
Interpretation
Vulnerability Statistics Interpretation
In 2023, vulnerability statistics for IoT paint a stark picture with over 15,000 unique CVE disclosures and 80% of devices shipped with known vulnerabilities, while high risk concentrates in areas like 1 in 3 router scans showing firmware issues and 95% of medical devices facing high severity vulnerabilities.
report visual · Key figures
IoT Security: Prevalent Weaknesses & Impact
A large share of IoT ecosystems face insecure configurations and common attack vectors, leading to widespread incidents and costly outcomes.
91%
91% of organizations faced at least one IoT-related attack in 2023
75%
Global IoT devices reached 15.9 billion in 2023, with 75% unsecured
60%
Cryptographic weaknesses in 60% of IoT chipsets from 2023 audits
60%
60% of IoT security breaches in manufacturing involved unsecured remote access points in 2023
40%
Global IoT cyber insurance premiums rose 40% to $15B in 2023
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Marcus Afolabi. (2026, February 13). IoT Security Statistics. Gitnux. https://gitnux.org/iot-security-statistics
MLA
Marcus Afolabi. "IoT Security Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/iot-security-statistics.
Chicago
Marcus Afolabi. 2026. "IoT Security Statistics." Gitnux. https://gitnux.org/iot-security-statistics.
Sources & references
100 datasets cited across this report · attribution is report-level