Report by 11:11 Systems
11:11 Cyber Trends Report – 2025
Key Findings
45% of companies have experienced AI-driven phishing attacks.
5% of companies that experienced a cyberattack in the past year reported the cost of one hour of downtime to be more than $1,000,000.
43% of organizations believe they are somewhat overconfident in their incident recovery capabilities but are taking steps to improve.
14% of companies that experienced a cyberattack in the past year reported the cost of one hour of downtime to be between $500,000 and $1,000,000.
48% of companies that experienced a cyberattack in the past year reported the cost of one hour of downtime to be between $100,000 and $250,000.
53% of IT leaders believe that regular testing and validation of cyber incident recovery plans is a key benefit a cyber incident recovery solution provides to contribute to better cyber resilience.
33% of companies that experienced a cyberattack in the past year reported the cost of one hour of downtime to be between $250,000 and $500,000.
18% of organizations believe they are realistic about their cyber incident recovery capabilities.
82% of companies have experienced a significant cyberattack in the past year.
57% of companies have experienced two or more cyberattacks in the past year.
Over 80% of organizations believe they are overly confident in their ability to recover from cyber incidents.
13% of organizations consider a lack of access to a clean room infrastructure and/or clean room recovery services to be their biggest challenge in terms of cyber incident recovery.
AI-driven attacks are the number one concern for IT cybersecurity leaders.
70% of organizations test their cyber incident recovery plans annually.
38% of organizations believe they are overly confident in their cyber incident recovery capabilities.
1% of organizations are not sure if they have an overconfident view of their cyber incident recovery capabilities.
21% of organizations consider insufficient budget for cyber incident recovery solutions to be their biggest challenge in terms of cyber incident recovery.
74% of organizations believe employing AI in their own businesses could potentially make them more vulnerable to a cyber attack.
96% of IT leaders state their organizations are very likely or somewhat likely to invest in cyber incident recovery in the next 12 months.
46% of organizations consider the complexity of planning required for cyber incident recovery to be their biggest challenge in terms of cyber incident recovery.
66% of IT leaders are concerned that AI will make it easier for bad actors to attack their infrastructure and target their employees.
35% of companies have experienced autonomous and mutating malware attacks.
29% of IT leaders believe that lower cyber liability insurance premiums are a key benefit a cyber incident recovery solution provides to contribute to better cyber resilience.