Cybersecurity
statistics and insights

Yes, cyberattacks are rapidly escalating due to AI-driven tactics, expanded remote-work vulnerabilities, and more advanced ransomware, causing major financial losses across nearly all sectors. In 2025, education, government, and telecommunications saw especially sharp increases when compared to 2024.

Our analysis shows that the leading attack types drove 93% of the total growth in cyberattacks in 2025. Ranked by contribution, they are:

• Data breach: 44% of total growth

• Social engineering: 33% of total growth

• Ransomware attack: 23% of total growth

Our analysis on cybersecurity statistics captured over 27,000 distinct cybersecurity attack events throughout the year.

A University of Maryland study²¹ shows attack frequencies substantially higher than our analysis. It found that a hacker attack occurs every 39 seconds, or about 2,244 attacks per day on the average internet-connected system.


Microsoft’s Digital Defense data shows²² attempted password attacks against Microsoft cloud identities have reached about 4,000 per second on average, driven largely by credential stuffing and brute force automation.

Based on our analysis of publicly disclosed data for 2025, the industries listed below were the most impacted by ransomware.

• Technology/IT: 27.4% of total ransomware events

• Healthcare: 22.3%

• Government: 8.3%

• Manufacturing: 7.8%

• Finance: 7.8%

The five commonly cited critical infrastructure sectors account for 73% of 2025 ransomware incidents, highlighting ransomware as the dominant threat to critical infrastructure.

The IBM data breach analysis⁵ shows that ransomware incidents specifically cost about $5.08 million on average in 2025, even as some other breach types became slightly cheaper to resolve.

Global ransomware damage costs were projected by Cybersecurity Ventures²⁸ to reach $57 billion annually in 2025. This figure breaks down to $156 million per day, or $2,400 every second, underscoring the financial danger posed to organizations worldwide.

The financial impact of these attacks has been further examined, following the principles of our analysis of publicly disclosed data.

• The majority of reported ransomware incidents (55.5%) fall within the $1 million to $10 million range.

• 34.6% of incidents escalated to greater damage, ranging from $10 million to $50 million.

• The most devastating organizational impacts — those exceeding $50 million in damage — accounted for 0.7% of incidents.

Our 2025 cybersecurity analysis reveals that phishing attacks concentrate heavily on financial services, technology, government, and retail/e-commerce industries:

These findings align closely with industry reporting, demonstrating the persistent and targeted nature of contemporary phishing campaigns. The Anti-Phishing Working Group’s Q2 2025 report³² closely mirrors our analysis and identifies financial/payment, SaaS and webmail, and e-commerce as the three most frequently targeted sectors.

AI-enabled phishing features prominently in public data³³, with 29.7% of phishing-related reports in 2025 referencing AI, including deepfakes and LLM-based techniques. Human-subject experiments show fully automated AI spear-phishing matches expert attacker click-through rates (~54%) and exceeds generic phishing by over threefold (12%), underscoring a substantial AI-driven effectiveness gain.

APWG³² highlights a rapid rise in QR-code (“quishing”) and SMS-based phishing — millions of attacks now rely on QR codes in emails and URL-laden SMS messages, which increased by over 2,500% in early 2025 in one dataset.

The financial impact of these attacks has been further examined, following the principles of our analysis of publicly disclosed data.

• 32% of credential theft incidents resulted in financial losses.

• 59% classified as “mass impact” events, affecting thousands to millions of individuals per incident.

• Credential theft frequently enables account takeovers, identity fraud, and serves as precursor to ransomware attacks.

Malware attacks are becoming more focused and multi-layered. Recent trends show a rise in credential-stealing threats, follow-up payloads after phishing, and more complex attack chains.

• Infostealer malware dominance
  The cyber threat landscape was dominated by infostealer malware, which is specifically engineered to steal credentials, session tokens, and other sensitive data.

• Post-phishing deployment
  Malware is increasingly being deployed as a secondary payload following an initial compromise, most commonly achieved through phishing attacks.

• Complex attack chains
  Per our analysis, a significant trend is the integration of malware with other attack methods, with 56% of observed malware incidents involving the use of multiple attack techniques.

Based on the FBI’s 2024 Internet Crime Report⁴⁶, the most common cybercrimes, measured by the number of complaints, were phishing/spoofing, extortion, and personal data breaches. However, the largest financial impact came from investment fraud, which accounted for losses exceeding $6.5 billion, largely driven by cryptocurrency scams.

While these datasets are not directly comparable due to differences in scope, geography, and reporting methodology, generally aligns with our 2025 data, suggesting a consistent trend.