Data Breaches by the Numbers

The increasing amount of large-scale, well-publicized breaches suggests that not only are the number of security breaches going up — they’re increasing in severity, as well.

1. In 2016, 3 billion Yahoo accounts were hacked in one of the biggest breaches of all time. (Oath.com)CLICK TO TWEET
2. In 2016, Uber reported that hackers stole the information of over 57 million riders and drivers. (Uber)
3. In 2017, 412 million user accounts were stolen from Friendfinder’s sites. (LeakedSource)CLICK TO TWEET
4. In 2017, 147.9 million consumers were affected by the Equifax Breach. (Equifax)
5. According to 2017 statistics, there are over 130 large-scale, targeted breaches in the U.S. per year, and that number is growing by 27 percent per year. (Accenture)CLICK TO TWEET
6. Thirty-one percent of organizations have experienced cyber attacks on operational technology infrastructure. (Cisco)
7. 100,000 groups in at least 150 countries and more than 400,000 machines were infected by the Wannacry virus in 2017, at a total cost of around $4 billion. (Malware Tech Blog)CLICK TO TWEET
8. Attacks involving cryptojacking increased by 8,500 percent in 2017. (Symantec)
9. In 2017, 5.4 billion attacks by the WannaCry virus were blocked. (Symantec)CLICK TO TWEET
10. There are around 24,000 malicious mobile apps blocked every day. (Symantec)
11. In 2017, the average number of breached records by country was 24,089. The nation with the most breaches annually was India with over 33k files; the US had 28.5k. (Ponemon Institute’s 2017 Cost of Data Breach Study)CLICK TO TWEET
12. In 2018, Under Armor reported that its “My Fitness Pal” was hacked, affecting 150 million users. (Under Armor)
13. Between January 1, 2005 and April 18, 2018 there have been 8,854 recorded breaches. (ID Theft Resource Center)CLICK TO TWEET

Cybersecurity Costs

Average expenditures on cybercrime are increasing dramatically, and costs associated with these crimes can be crippling to companies who have not made cybersecurity part of their regular budget.

ADVERTISEMENT

14. In 2017, cyber crime costs accelerated with organizations spending nearly 23 percent more than 2016 — on average about $11.7 million. (Accenture)CLICK TO TWEET
15. The average cost of a malware attack on a company is $2.4 million. (Accenture)
16. The average cost in time of a malware attack is 50 days. (Accenture)CLICK TO TWEET
17. From 2016 to 2017 there was an 22.7 percentage increase in cybersecurity costs. (Accenture)
18. The average global cost of cyber crime increased by over 27 percent in 2017. (Accenture)CLICK TO TWEET
19. The most expensive component of a cyber attack is information loss, which represents 43 percent of costs. (Accenture)
20. Ransomware damage costs exceed $5 billion in 2017, 15 times the cost in 2015. (CSO Online)CLICK TO TWEET
21. The Equifax breach cost the company over $4 billion in total. (Time Magazine)
22. The average cost per lost or stolen records per individual is $141 — but that cost varies per country. Breaches are most expensive in the United States ($225) and Canada ($190). (Ponemon Institute’s 2017 Cost of Data Breach Study)CLICK TO TWEET
23. In companies with over 50k compromised records, the average cost of a data breach is $6.3 million. (Ponemon Institute’s 2017 Cost of Data Breach Study)
24. Including turnover of customers, increased customer acquisition activities, reputation losses and diminished goodwill the cost of lost business globally was highest for U.S. companies at $4.13 million per company. (Ponemon Institute’s 2017 Cost of Data Breach Study)CLICK TO TWEET
25. Damage related to cybercrime is projected to hit $6 trillion annually by 2021. (Cybersecurity Ventures)

Cybersecurity Facts and Figures

It’s crucial to have a grasp on the general landscape of metrics surrounding cybersecurity issues, including what the most common types of attacks are and where they come from.

26. Ransomware detections have been more dominant in countries with higher numbers of internet-connected populations. The United States ranks highest with 18.2 percent of all ransomware attacks. (Symantec)CLICK TO TWEET
27. Trojan horse virus Ramnit largely affected the financial sector in 2017, accounting for 53 percent of attacks. (Cisco)
28. Most malicious domains, about 60 percent, are associated with spam campaigns. (Cisco)CLICK TO TWEET
29. Seventy-four percent of companies have over 1,000 stale sensitive files. (Varonis)
30. Malware and web-based attacks are the two most costly attack types — companies spent an average of US $2.4 million in defense. (Accenture)CLICK TO TWEET
31. The financial services industry takes in the highest cost from cyber crime at an average of $18.3m per company surveyed. (Accenture)
32. Microsoft Office formats such as Word, PowerPoint and Excel make up the most prevalent group of malicious file extensions at 38 percent of the total. (Cisco)CLICK TO TWEET
33. About 20 percent of malicious domains are very new and used around 1 week after they are registered. (Cisco)
34. Over 20 percent of cyber attacks in 2017 came from China, 11 percent from the US and 6 percent from the Russian Federation. (Symantec)CLICK TO TWEET
35. The app categories with most cybersecurity issues are lifestyle apps, which account for 27 percent of malicious apps. Music and audio apps account for 20 percent. (Symantec)
36. The information that apps most often leak are phone numbers (63 percent) and device location (37 percent). (Symantec)CLICK TO TWEET
37. In 2017, spear-phishing emails were the most widely used infection vector, employed by 71 percent of those groups that staged cyber attacks. (Symantec)
38. Between 2015 and 2017, the U.S. was the country most affected by targeted cyber attacks with 303 known large-scale attacks. (Symantec)CLICK TO TWEET
39. In 2017, overall malware variants were up by 88 percent. (Symantec)
40. Among the top 10 malware detections were Heur.AdvML.C 23,335,068 27.5 2 Heur.AdvML.B 10,408,782 12.3 3 and JS.Downloader 2,645,965 3.1 (Symantec)CLICK TO TWEET
41. By 2020, the estimated number of passwords used by humans and machines worldwide will grow to 300 billion. (Cybersecurity Media)

Cybersecurity Risks

With new threats emerging every day, the risks of not securing files is more dangerous than ever, especially for companies.

42. 21 percent of all files are not protected in any way. (Varonis)CLICK TO TWEET
43. 41 percent of companies have over 1,000 sensitive files including credit card numbers and health records left unprotected. (Varonis)
44. 70 percent of organizations say that they believe their security risk increased significantly in 2017. (Ponemon Institute’s 2017 Cost of Data Breach Study)CLICK TO TWEET
45. 69 percent of organizations don’t believe the threats they’re seeing can be blocked by their anti-virus software. (Ponemon Institute’s 2017 Cost of Data Breach Study)
46. Nearly half of the security risk that organizations face stems from having multiple security vendors and products. (Cisco)CLICK TO TWEET
47. 7 out of 10 organizations say their security risk increased significantly in 2017. (Ponemon Institute’s 2017 Cost of Data Breach Study)
48. 65 percent of companies have over 500 users who never are never prompted to change their passwords. (Varonis)CLICK TO TWEET
49. Ransomware attacks are growing more than 350 percent annually. (Cisco)
50. IoT attacks were up 600 percent in 2017. (Symantec)CLICK TO TWEET
51. The industry with the highest number of attacks by ransomware is the healthcare industry. Attacks will quadruple by 2020. (CSO Online)
52. 61 percent of breach victims in 2017 were businesses with under 1,000 employees. (Verizon)CLICK TO TWEET
53. Ransomware damage costs will rise to $11.5 billion in 2019 and a business will fall victim to a ransomware attack every 14 seconds at that time. (Cybersecurity Ventures)
54. Variants of mobile malware increased by 54 percent in 2017. (Symantec)CLICK TO TWEET
55. Today, 1 in 13 web requests lead to malware (Up 3 percent from 2016). (Symantec)
56. 2017 represented an 80 percent increase in new malware on Mac computers. (Symantec)CLICK TO TWEET
57. In 2017 there was a 13 percent overall increase in reported system vulnerabilities. (Symantec)
58. 2017 brought a 29 percent Increase in industrial control system–related vulnerabilities. (Symantec)CLICK TO TWEET
59. By 2020, we expect IT analysts covering cybersecurity will be predicting five-year spending forecasts (to 2025) at well over $1 trillion. (Cybersecurity Ventures)
60. The United States and the Middle East spend the most on post-data breach response. Costs in the U.S. were $1.56 million and $1.43 million in the Middle East. (Ponemon Institute’s 2017 Cost of Data Breach Study)CLICK TO TWEET

There’s no question that the situation with cybercrime is dire. Luckily, by assessing your business’s cybersecurity risk, making with company-wide changes and improving overall security behavior, it’s possible to protect your business from most data breaches.

ADVERTISEMENT

Make sure you’ve done everything you can do to avoid your company becoming a victim to an attack. The time to change the culture toward improved cybersecurity is now.