7. Statistics of computer security incidents and data breaches

Interesting statistical data related to data breach incidents:

  • 88 % of cybersecurity breaches are caused by human error (Stanford University/Tessian study "Psychology of Human Error")

  • The average time needed to detect a breach is 194 days (IBM: AI makes ‘real‑world impact’ on breach costs)

  • The average breach lifecycle — from detection to containment — lasts 258 days (IBM: AI makes ‘real‑world impact’ on breach costs)
  • 56 % of Americans do not know what steps to take in the event of a data leak (Varonis)

  • The average ransomware payout increased sharply — from $812,380 in 2022 to $1,542,333 in 2023 (SC Magazine Report: Ransomware payouts and recovery cost went way up in 2023)

  • 94 % of malware is delivered via email (Verizon)

  • The average cost of recovering from a ransomware attack in 2024 is $2.73 million (Sophos)

  • 75 % of organisations experienced at least one ransomware attack last year (Infosecurity Magazine)

  • Phishing was the leading infection method, recorded in 41 % of incidents, making it the most common initial attack vector (Security Magazine)

  • 19 % of security breaches include internal persons (Verizon)

Accessibility

Background Colour Background Colour

Font Face Font Face

Font Size Font Size

1

Text Colour Text Colour

Font Kerning Font Kerning

Image Visibility Image Visibility

Letter Spacing Letter Spacing

0

Line Height Line Height

1.2

Link Highlight Link Highlight