Cyber Attack Statistics

45% of cybersecurity professionals expect a cyber-attack on their organization in the next year.

Enterprises face social engineering attacks (45%), vulnerabilities (39%), and remote access attacks (24%), with remote access increasing 5 percentage points from 2025.

35% of cybersecurity professionals report experiencing an increase in cyber-attacks compared to a year ago.

49% of UK SMBs report experiencing a cyber incident in the past year.

UK SMBs take just over four weeks on average to identify and recover from a breach.

46% of manufacturers experienced increase of operational cost and production downtime where incidents caused disruption.

31% of manufacturers affected by supplier cyber attacks reported delays to customer deliveries.

30% of manufacturers experienced a cyber incident in the past year, either directly or through their supply chain.

6% of reported cybercrime cases in Africa in 2025 involved cyber attacks on critical infrastructure.

10% of restaurant chains have temporarily or permanently closed a location following a cyberattack.

80% of leaders at quick service and fast casual restaurant chains experienced at least one cyber incident in the past 12 months.

84% of security decision-makers and practitioners agree that cyberattacks exploit known risks that are not prioritized.

1 in 5 suffered a serious incident linked to AI code

71% say AI has made security incidents harder to detect, investigate, or fix

Cyber is the leading cause of both IT downtime and data loss for the fourth consecutive year.

30% of organisations cite cyber incidents as their biggest cause of IT downtime over the last 12 months, ahead of hardware failure at 19%.

43% of large organisations reported losing data as a result of a cyber attack.

Downtime per incident averaged almost 30 hours.

85% of security and IT leaders identify security incidents, data exposures, or near misses where the root cause is an AI system.

61% of healthcare practices expect a fatal cyberattack within five years.

Over the past 12–18 months, 57% of enterprise CISOs report their enterprises experienced an attack that originated on a remote, mobile, or hybrid device.

More than a third of organizations in the US report attempted cyber attacks occurring daily or even more frequently.

80% of cyber incidents involving medical devices cause moderate or significant disruption to patient care.

Manufacturing accounted for more than one in four of all global cyberattacks in 2025 and had been the most targeted industry for five consecutive years.

56% of cyberattacks on healthcare organizations target U.S.-based organizations.

Healthcare organizations are being hit by cyberattacks about every 10 hours.

36% of organizations cite cyberattacks as a top emerging threat.

42% of organizations that experienced a cyber incident report customer or constituent disruption.

41% of organizations that experienced a cyber incident report financial loss or revenue impact.

32% of organizations experienced more than one cyber attack in the last 12 months.

83% of organizations in crypto and decentralized finance, 79% in retail, and 76% in manufacturing experienced cyber attacks.

47% report operational shutdown, 41% report data loss, 41% report reputational damage, and 40% report lost revenue as impacts of cyber attacks in the last 12 months.

The education sector was the most targeted industry in March, experiencing an average of 4,632 cyber-attacks per organization per week, a 6% decrease year over year.

The average number of weekly cyber-attacks in March per organization reached 1,995, representing a 4% decrease month over month and a 5% decline compared to March 2025.

Latin America recorded the highest attack volume globally in March 2026, averaging 3,054 weekly attacks per organization, alongside a 9% year-over-year increase. It was the only region to experience growth compared to February.

73% of US IT and security professionals at companies with at least 1,000 employees identify increasing backup data security as their top-ranked defense against AI-powered cyberattacks.

High- and medium-severity attacks surged 20.8% to more than 13 billion hits.

79% of US IT and security professionals at companies with at least 1,000 employees say AI-powered attacks gaining access to backups is their top concern.

89% of US IT and security professionals at companies with at least 1,000 employees say AI-powered cyberattacks make them more concerned about their organization’s data safety.

36% of CNI organisations reported increasing cyber budgets in response to an incident