Cyber Security Statistics 2023

Cybersecurity is often seen as one of those big problems that only large entities like banks, tech companies, and governments have to worry about. In reality, a lot more people should be concerned with cybersecurity and not just the big corporations. The latter may be indeed responsible for more data. Still, it is the smaller entities, such as companies with less than 1000 employees, that are at the greatest risk.

I compiled a list of cyber security statistics to help visualize what is happening in the field as well as what to expect in 2022.

Alarming Cyber Security Statistics

Here are some alarming cyber security facts:

• It takes half a year to detect a data breach.
• 43% of all cyber attacks are aimed at small businesses.
• 91% of attacks launch with a phishing email.
• A business falls victim to a ransomware attack every 14 seconds.
• 38% of malicious attachments are masked as one Microsoft Office type of file or another.
• Companies faced an average of 22 security breaches in 2020.
• The global cost of online crime will reach $10.5 trillion annually by 2025.
• Estimates show that the cybersecurity market will reach $300 billion by 2024.

Okay, let’s begin with the latest cyber security stats and facts.

Cyber Security Statistics for 2023

In addition to dealing with the COVID-19 situation, companies have to protect themselves from cyber crimes as well. Here’s what the numbers reveal:

1. Of the cases reported in January 2022, removable media were responsible for 9% of attack vectors.

(Source: Expel)

USB flash drives are still a thing, and they can still wreak havoc by spreading malware. 

Did you know that most people would plug an unknown flash drive into their computer?

2. IoT cybersecurity will increase in 2022.

(Source: Sectrio)

IoTs aren’t known for having excellent security. This is perhaps why they have been targets over the past few years. Since more and more IoT devices are hitting the market, there will be a rise in related cybersecurity. 

3. On average, the cost of data breaches in 2021 was $4.24 million.

(Source: IBM)

Considering the colossal cost of these cyberattacks, companies should do their best to improve their security. Still, human error is a major factor, considering how many data breaches happen because of misconfigured databases. 

4. Security as a service will represent at least 50% of the security software delivery. 

(Source: Gartner)

Cybersecurity budget statistics reveal that these services are set to surpass the spending on on-premise and hybrid solutions. 

5. 69% of businesses find the cost of staying ahead of cyber criminals unsustainable. 

(Source: Accenture)

Staying ahead of attackers is no cheap task. More than two-thirds of companies face financial difficulties while fighting the constant battle against cyber crime. However, considering the ingenuity of hackers, insider threats, and human errors, this trend is likely to continue. 

6. Cybersecurity market is predicted to reach $300 billion by 2024.

(Source: PRNewswire)

The cybersecurity market is growing at a fast pace. As a result of a steady rise in cybercrimes, there is an increase in demand for security products and solutions.

7. Spending on global cybersecurity healthcare is predicted to reach $125 billion by 2025.

(Source: Parachute)

According to healthcare data breach statistics, the industry is taking a significant hit regarding cyber-attacks. Hospitals spend about $408 on every affected patient’s record and $1.75 to fix their damaged reputation for every attack.

For this reason, the expected allocation of funds will increase for cybersecurity in the healthcare sector over the next few years.

8. As of February 2022, there was 8.77 million new malware.

(Source: AV-TEST)

Threat actors are creating malware like crazy. 

Cyber security stats reveal that in 2019, there were almost 145 million new malware samples.

It’s almost like there’s a malware machine gun somewhere that’s constantly firing. And it’s trying to hit as many targets as possible. 

On the bright side, there was a reduction in new malware between January and February 2022. In January, there was 11.41 million malware. Perhaps we’ll witness more drops.

9. 91% of UK businesses experienced a phishing attack in 2021.

(Source: Info Security)

This increased from 2019 when “only” 72% of UK companies experienced such an attack. On the bright side, there’s a drop in malware attacks – only 16% of businesses were affected, compared to 33% in 2019. 

However, this is still a drop compared to 2020, when 78% experienced phishing.

10. The number of passwords worldwide will grow to 300 billion.

(Source: Yahoo! Finance)

That’s a huge number! 

If every person on Earth used passwords, each of us would have about 38. Ain’t that crazy? I can’t remember more than one, let alone 38. Thankfully, there are these cute little apps called password managers that can handle this problem. 

Now.

If these cyber security statistics for 2022 weren’t enough for you, rest assured there’s many more below. 

Data Breaches Statistics

Often it is data breaches that steal the headlines.

11. In most cases, it takes companies about 6 months to detect a data breach.

(Source: ZD Net)

If a robbery took place and the perpetrators got away, how much of a head start do they have to cover their tracks? A day? An hour? Cyber criminals often get a neat 6-month head start, which makes tracking them down that much harder.

12. There were 293 million recorded breaches in 2021. This figure is a reduction from the  2.2 billion recorded during the peak year of 2018.

(Source: PC Mag)

It seems that identity theft does pay. These breaches account for millions, with the price per breach ranging anywhere from $120-$600.

If we average these out at $360, then the total amount is in the billions. People talk about the cost of cyber security but seldom think about the cost of not having it. 

Although these figures are down, the combined percentages of social security number thefts and identity breaches increased from 80% to 83%.

13. Over 90% of small and medium-sized businesses have negatively reported cyberattacks that affected their business.

(Source: Enisa)

Smaller companies are more prone to cyber-attacks because they don’t employ proper defenses against advanced cyber threats, contributing heavily to these cyber security statistics.

Cyber Attack Trends

Cyber attacks vary in sort and severity, but they can be absolutely devastating, especially for small business owners.

14. 43% of cyber attacks are targeted at small businesses.

(Source: Small Business Trends)

It makes a lot of sense that the little guy is targeted so often. While the benefit of such an attack for the hacker is relatively small, it is much easier to pull it off. Many small businesses have minimal security infrastructure, making them easy prey for data predators. Considering the number of cyber attacks per day, quite a few of those get targeted.

15. Around 50% of the risk companies face come by way of having multiple security vendors.

(Source: Cisco)

One may think when it comes to security, the more the merrier. However, having multiple security vendors is a great way to complicate your security infrastructure in a way that is likely to create greater vulnerabilities. It is best to stick with one security vendor and comply with all security updates and recommendations the vendor presents, according to various hacking stats.

16. Between January and June 2021, there were 1.5 billion IoT attacks globally.

Source: (Tdwi)

The number of IoT devices has skyrocketed, giving hackers and cybercriminals a greater choice of targets. A portion of the rise is a result of the increased number of IoT devices, but the more significant issue is that related security isn’t keeping pace with the growing number of threats.

17. 31% of organizations have experienced cyber attacks on operational infrastructure.

(Source: Cisco)

Perhaps the more concerning side to cyber security statistics, in general, is the number of incidents that have gone unreported. Speculation would lead one to believe that the figure of 31% is significantly lower than reality. Whatever the case, this is an important figure to be aware of as it shows that hackers are proficient in finding the correct target.

18. DDoS attacks account for 5% of monthly traffic related to gaming.

(Source: Cox BLUE)

Another prevalent form of attack comes in the form of DDoS. This attack attempts to disrupt regular traffic to the desired web endpoint. Video gaming is a popular place for these attacks to occur because there are predictable and specific endpoints for most devices.

19. Just 38% of global organizations claim that they are equipped and able to handle a complex cyber attack.

(Source: IBM)

Perhaps one of the most alarming cyber security statistics on this list is that 62% of global organizations cannot claim that they are equipped to handle a cyber attack. This void will lead the charge for improved cybersecurity in the future.

Cyber Security Stats

Malware Statistics

Malware is by far the most common type of malicious internet activity. One of the most common ways to protect your devices from malware is by using antivirus software.

20. The app stores block over 24,000 malicious mobile apps each day.

(Source: Symantec)

Apple has generally been on top of its app store, not allowing malicious or harmful software onto iOS devices. Android has had a longer journey there because of the freedom afforded to developers. Nevertheless, it improved radically over the past several years. Such malicious apps can still be accessed, but most devices do require user approval before installing any unverified third-party applications. Cyber attack statistics show this to be a key reason why harmful software for mobile devices is not such an issue anymore.

21. By 2031, ransomware will cost victims $265 billion yearly.

(Source: Cyber Security Ventures)

This type of malware can cripple entire systems or even render them useless. A successful attack can result in a cybersecurity breach that disrupts company operations and ruin its public image.

22. There is 2.633 million new Mac malware as of June 17, 2022.

(Source: AV-TEST)

Mac computers have always been renowned for their threat security. But things seem to be changing. Malware statistics point to an astronomical increase. Is it possible that cybercriminals have found new vulnerabilities?

23. 75% of the healthcare industry has been infected with malware at some point in time.

(Source: CISION: PR Newswire)

The healthcare industry accounts for the most records lost. This has to do with many factors including outdated systems, lack of cybersecurity training, and substandard protocols. In short, healthcare providers are an easy target with a lot to offer to potential criminals. It is no wonder why this industry is so often a target of large scale cyber attacks.

24. Around 60% of malicious web domains are associated with spam campaigns.

(Source: Cisco)

For some reason I find it concerning when a company tells me to check my spam folder. The spam folder is where many people get taken advantage of. Spam campaigns attempt to send the user to insecure or malicious domains in an attempt to mine data.

25. 38% of malicious files came in formats used by the Microsoft Office suite of products.

(Source: Cisco)

Microsoft Office is one of the most familiar sights in a modern working environment. Cybercriminals use these formats for their malicious files in attempts to lure unsuspecting victims into thinking it is just a simple spreadsheet or report. This is valid not only for recent cyber attacks, as executable files masked as harmless. Well-known files have been a popular digital bait for years now.

Cyber Security Jobs Market Statistics

Security specialist is one of the most promising career choices in the IT sector.

26. There are over 300,000 unfilled cybersecurity jobs in the United States, with the demand rising each year.

(Source: Cybint Solutions)

If you are a college freshman deciding on a major, then cybersecurity might be an attractive option. Not only are there plenty of openings, but the demand is expected to rise at an unprecedented rate. There are plenty of jobs available in tech nowadays, but perhaps none are as vital as security. The next few cyber security stats show just how pressing this need may be.

27. In 2021, unfilled cybersecurity jobs were around 3.5 million.

(Source: Tutela)

The supply of jobs was expected to outpace the demand. Chances are, companies will not be able to recruit enough cybersecurity experts. As cybercrime statistics show, this is one of the biggest problems that companies have to solve.

28. Cybersecurity job postings are up 74% over the past five years.

(Source: Cybint Solutions)

This is the silver lining. Many young people will be able to find gainful work in the cyber security sector. The unfortunate reality is much of this will be in response to attacks that will take place, and that there will be many more data breaches affecting millions of people within the next few years. Data breach statistics don’t suggest that the need for experts in the field will be lessened any time soon.

29. Cybersecurity expenditures are expected to rise above $1 trillion by 2025.

(Source: Cybersecurity Ventures)

Once again, just like the jobs figures, this points to a very secure future for those pursuing a career in cybersecurity. The question remains if these expected expenditures will be enough to prevent data breaches or at least bring them down significantly.

30. You can expect the global cost of online crime to reach $10.5 trillion annually by 2025.

Source: (Cybersecurity Ventures)

Sadly, this crime rate only continues to rise. Criminals are finding increasingly clever and diabolical ways to get their hands on data. This, coupled with the projections for further data breaches, spells future challenges. Some estimates have the number as high as $10 trillion. In this context, whatever the cost of cybersecurity may be, it seems like a worthy investment.

31. 65% of companies have over 500 employees that have never changed their password.

(Source: Varonis)

I believe most people are guilty of not changing their password often enough. This is just making it easy for would-be cybercriminals to have easy access to sensitive information through compromised passwords.

An easy solution to these problems is an automated system that requires employees to regularly change passwords. Many such programs are free and easily implemented by IT professionals.

Changing passwords is not enough though. Employees should know how to pick a strong password as well.

Ransomware Statistics

Ransomware, especially with the advent of cryptocurrencies, is an increasingly popular way for hackers to make money.

32. Ransomware attacks are growing more than 350% annually.

(Source: Cisco)

A ransomware attack is designed to hijack the targets’ systems and hold them hostage in exchange for certain demands. These attacks are particularly effective and growing in number as the data from Cisco shows. The increase in cyber attacks is bound to continue in the foreseeable future.

33. The costs of damage caused by ransomware will rise to $42 billion in 2024, according to stats.

(Source: Cybersecurity Ventures)

Once again, ransomware holds data and entire systems hostage until you meet the demands. Independent risk evaluators postulate that compliance with the perpetrator leads to more significant security vulnerabilities and greater total loss.

The numbers are estimated to increase over the years, reaching as high as $265 billion in 2031.

34. A business falls victim to a ransomware attack every 14 seconds.

(Source: Cybersecurity Ventures)

Something that differentiates cybercrime from any other kind of crime is the automation that can be deployed by perpetrators. Automation allows for cyber attacks to be deployed simultaneously and relentlessly. The number of cyber attacks each day keeps going up. Automation may also be the key to protection, but is not yet clear how to utilize this technology. As the stakes get higher and cyber criminals become more aggressive, the incentive to develop a solution will rise as well.

Important Cyber Security Facts

System upgrades are not the easiest thing to implement. However, they become increasingly necessary to address adequately the growing security threats.

35. 21% of all files are completely unprotected.

(Source: Varonis)

This isn’t as startling of a revelation when compared to the other cyber security stats, but it is an alarming number nonetheless. Of course, just because a file isn’t protected, doesn’t mean it’s accessible.

36. Reported system vulnerabilities went up 9.3% in 2021 compared to the previous year.

(Source: K2 Cyber Security)

As tech evolves, most do not upgrade immediately. Older systems have different security vulnerabilities. By the end of 2021, there were 20,061 recorded vulnerabilities.

37. Human error is responsible for 95% of data breaches.

(Source: Cybint Solutions)

With a large data breach, all eyes and fingers begin pointing to the IT department. The fact of the matter is that the IT department isn’t usually the one to blaim for these data breaches. Information technology security breaches are few and far between. User error or actions that fall outside of IT recommended behavior will always cause more problems than just following the guidelines set by the IT department.

Phishing Statistics

Phishing mail, just like the popular hobby with similar name, is extremely common and simple.

38. 30% of U.S. users open phishing emails.

(Source: Verizon)

A tremendous amount of emails is sent every day around the globe. A big part of it is phishing emails.

Unsurprisingly, phishing attacks make up a large amount of cyber security incidents. Statistics show that people aged 35-44 are the most likely victims of cybercrime, but it is quite likely that most of us have opened phishing emails at some point in time.

Kaspersky’s anti-phishing software has caught hundreds of millions of them every year.

39. 12% of those who opened phishing emails later opened the infected links or attachments.

(Source: Verizon)

As we await the arrival of next year’s cyber security statistics, the report from Verizon shows that phishing attacks had a moderately high success rate. With more and more people understanding the dangers that lurk with these attacks, the hope is that this number will continue to fall in the coming years.

40. In 2021, 74% of businesses in the US and 73% in the UK reported being victims of a phishing attack.

(Source: GraphUs)

Phishing attacks are the most common cyber security attack and are a big reason for many compromised passwords. If you check your spam folder in your email, it is more than likely that you will find several of them. If a phishing email makes it past filters into the inbox, to the untrained eye, they will seem like legitimate messages that are trustworthy.

Conclusion

Cyber security statistics show that this field will only continue to grow commensurately with the demand. Hackers and cyber criminals aren’t slowing down, so take some time to appreciate those keeping the digital side of our lives safe. This expanding industry figures to become more important with each year that comes.