Cybersecurity Statistics
Every figure is quoted as its publisher wrote it and linked back to the report it came from, so you can check it before you cite it.
Most recent
In the U.S., the confirmed cyberattack rate is 34%, two percentage points above the global average.
Zoho, The State of Workforce Password Security in 2026
Latest statistics
The newest addition from each of the last six reports.
The Axios NPM package was downloaded 100 million times per week.
An average of 42 monthly attacks per application are viable, meaning exploitation attempts reach and trigger real vulnerable code.
Small and midsize companies carry 414 unsanctioned AI tools per 1,000 employees.
Fewer than 5% of S&P 500 companies describe a governed AI cyber-risk process (a named policy, program, or committee with stated cybersecurity activity).
70% of CISOs optimistic about managing AI risk say their security team uses AI effectively, compared with 38% of pessimistic CISOs.
AI agent accounts make up 2.7% of all registered accounts on the Hack The Box platform.
Browse by Industry
Healthcare
422 stats · 60 sourcesFinancial Services
597 stats · 114 sourcesEducation
196 stats · 27 sourcesGovernment
128 stats · 38 sourcesBrowse by Topic
View All →Ransomware
1199The most heavily reported topic here, and the one where publishers disagree most about how often organisations pay.
Phishing
449Click rates and BEC losses. Watch for figures that count attempts rather than successful attacks.
Data Breach
542Breach costs and detection times.
Fraud
1087Now dominated by deepfake and AI-assisted scams.
DDoS
135Insider Threat
144Negligent insiders outnumber malicious ones in almost every source.
Compare
Top Publishers
View All 608→Every statistic links to the report it came from, with the publisher and publication date attached. Read about our methodology →
Curated by Laura Martisiute. Last updated Aug 27, 2026.