Cyber security statistics 2026

reported lost to internet crime in the US in 2025, up 26% from 2024 (FBI IC3)

Sample: All complaints filed with IC3 in 2025 (1,008,597); not a sample. Each complaint has one crime type.

internet crime complaints filed with the FBI in 2025, almost 3,000 a day

Sample: All complaints filed with IC3 in 2025 (1,008,597); not a sample. Each complaint has one crime type.

average loss per internet crime complaint reported to the FBI in 2025

reported lost by people aged 60 and over in 2025, up 59% from 2024; the age group with the highest losses

of all internet crime losses reported to the FBI in 2025 came from cyber-enabled fraud ($17.697 billion)

lost to investment fraud in 2025, the costliest type of internet crime reported to the FBI ($8,648,617,756)

lost to business email compromise in 2025 across 24,768 complaints to the FBI

lost in 2025 in 22,364 internet crime complaints that mention AI, such as voice cloning and deepfake videos

ransomware complaints filed with the FBI in 2025, with $32.3 million in reported losses that exclude downtime and recovery

of breaches started with attackers exploiting a software vulnerability, now the top way in, ahead of stolen credentials (13%)

Sample: 31,861 incidents, 22,625 confirmed breaches in 145 countries, 1 Nov 2024 to 31 Oct 2025, from Verizon and partner contributors.

of data breaches involved ransomware, up from 44% the year before

Sample: 31,861 incidents, 22,625 confirmed breaches in 145 countries, 1 Nov 2024 to 31 Oct 2025, from Verizon and partner contributors.

of ransomware victims did not pay the ransom; the median payment fell to $139,875

of breaches involved a third party such as a supplier or software vendor, up 60% from the year before

of breaches involved a person's action or mistake, such as clicking a phishing link, up from 60%

of ransomware victims with a known size were small or mid-size businesses (under 1,000 employees)

average cost of a data breach in the US in 2026, the highest of any country and more than twice the global $4.99 million

Sample: 602 breached organizations in 16 countries and regions, breaches March 2025 to February 2026; 3,558 interviews by Ponemon Institute.

global average cost of a data breach in 2026, up 12% and a record high

Sample: 602 breached organizations in 16 countries and regions, breaches March 2025 to February 2026; 3,558 interviews by Ponemon Institute.

rise in AI-driven attacks: more than one in four organizations hit by a malicious attack said it was AI-driven, led by deepfake impersonation

Sample: 602 breached organizations in 16 countries and regions, breaches March 2025 to February 2026; 3,558 interviews by Ponemon Institute.

of security incidents involved shadow AI (staff using unapproved AI tools), up from 20% a year earlier

Sample: 602 breached organizations in 16 countries and regions, breaches March 2025 to February 2026; 3,558 interviews by Ponemon Institute.

of breached organizations said ransomware hit their systems, up from 24% in 2023

Sample: 602 breached organizations in 16 countries and regions, breaches March 2025 to February 2026; 3,558 interviews by Ponemon Institute.

of UK businesses identified a cyber breach or attack in the last 12 months, about 612,000 firms

Sample: 2,112 UK businesses and 1,085 charities, random-probability phone survey, fieldwork August to December 2025.

of UK micro businesses (1 to 9 staff) identified a cyber breach or attack in the last 12 months, against 69% of large firms

Sample: 2,112 UK businesses and 1,085 charities, random-probability phone survey, fieldwork August to December 2025.

of large UK businesses (250+ staff) identified a cyber breach or attack in the last 12 months

Sample: 2,112 UK businesses and 1,085 charities, random-probability phone survey, fieldwork August to December 2025.

lost to fraud by US consumers who reported to the FTC in 2025, from 3 million fraud reports

median yearly pay of US information security analysts in May 2025; jobs are projected to grow 21% from 2025 to 2035