Cyber ​​incident management of personal data breaches

7. Statistics of computer security incidents and data breaches

Interesting statistical data related to data breach incidents:

• 88 % of cybersecurity breaches are caused by human error (Stanford University/Tessian study "Psychology of Human Error")

• The average time needed to detect a breach is 194 days (IBM: AI makes ‘real‑world impact’ on breach costs)
  
  
• The average breach lifecycle — from detection to containment — lasts 258 days (IBM: AI makes ‘real‑world impact’ on breach costs)

• 56 % of Americans do not know what steps to take in the event of a data leak (Varonis)

• The average ransomware payout increased sharply — from $812,380 in 2022 to $1,542,333 in 2023 (SC Magazine Report: Ransomware payouts and recovery cost went way up in 2023)

• 94 % of malware is delivered via email (Verizon)

• The average cost of recovering from a ransomware attack in 2024 is $2.73 million (Sophos)

• 75 % of organisations experienced at least one ransomware attack last year (Infosecurity Magazine)

• Phishing was the leading infection method, recorded in 41 % of incidents, making it the most common initial attack vector (Security Magazine)

• 19 % of security breaches include internal persons (Verizon)