Financial Services Cybersecurity Statistics

Cybercrime-related losses in Africa increased from USD 192 million to USD 484 million since 2024.

14% of reported cybercrime cases in Africa in 2025 involved identity theft and financial fraud.

7% of reported cybercrime cases in Africa in 2025 involved ransomware or Banking Trojan stealers.

38% of organizations allow AI agents to create and modify business records

Financial services breaches cost on average $6.3 million.

Financial services recorded the highest frequency of compromises by sector at 387.

Malware activity averaged 39,341 hits per firewall in the first half of 2026, giving financial services the second-highest per-device malware intensity of any industry, behind only healthcare.

51% of IAM leaders and stakeholders cite the inability to support legacy apps and infrastructure as an obstacle to universal phishing-resistant MFA.

The GoodTech Telnet Server Buffer Overflow vulnerability generated 42.2 million detection events in the financial services industry in the first half of 2026.

Only 28% of the MFA used for workforce authentication in financial services is phishing-resistant.

SaaS applications in financial organizations are protected by MFA at a rate of 74%.

68% of restaurant leaders lose more than $1,000 per hour when point-of-sale or ordering systems fail during a peak meal rush.

Log4Shell generated 35.6 million detection events in the first half of 2026 in the financial services industry, more than two years after disclosure.

34% of restaurant leaders say a loss under $50,000 would significantly impact their business.

Interactions with Network APIs, including SIM Swap and Number Verification, grew by 91%, with the finance sector leading adoption.

Internal information disclosure accounts for 42.7% of critical exposures in Financial Services.

35.9% of IT and security professionals report experiencing business email compromise (BEC) resulting in financial or data loss in the past 12 months.

Financial losses totalling around £270,000 were reported by UK organisations that experienced ransomware last year, a 50 per cent increase compared to previous year.

Average ransom payment dropped to $2.8 million, down from $3.6 million in 2025.

83% of ransomware victims paid a ransom, up from 70% previously.

In North America, 24% of breached organizations reported losses of at least $100,000 in the past year.

In North America, 12% of breached organizations reported losses above $250,000 in the past year.

Emerging global statutory fines reach up to €35 million or 7% of an enterprise's total global annual turnover.

By account type, credit cards accounted for 41% of all attempted misuse, checking accounts account for 17.7%, and personal loans account for 8.5%.

0% of victims who experienced three or more financial impacts reported a resolution.

Losses due to scams globally reach nearly half a billion US dollars in 2025.

9% of victims with any financial impact were able to resolve their cases.

Direct ransomware attacks on financial institutions spiked 76% year-over-year in Q1 2026.

Across all financial services vendors, 50.2% carry high-severity CVEs.

Qilin was responsible for 59 finance-sector incidents in the past year.