Cyber Attack Statistics

34% of U.S. organizations experienced a confirmed cyberattack in the past year, compared with 32% globally.

Across the global sample, one in three businesses reported a confirmed cyberattack in the past year.

6% of reported cybercrime cases in Africa in 2025 involved cyber attacks on critical infrastructure.

10% of restaurant chains have temporarily or permanently closed a location following a cyberattack.

80% of leaders at quick service and fast casual restaurant chains experienced at least one cyber incident in the past 12 months.

84% of security decision-makers and practitioners agree that cyberattacks exploit known risks that are not prioritized.

1 in 5 suffered a serious incident linked to AI code

71% say AI has made security incidents harder to detect, investigate, or fix

Cyber is the leading cause of both IT downtime and data loss for the fourth consecutive year.

30% of organisations cite cyber incidents as their biggest cause of IT downtime over the last 12 months, ahead of hardware failure at 19%.

43% of large organisations reported losing data as a result of a cyber attack.

Downtime per incident averaged almost 30 hours.

85% of security and IT leaders identify security incidents, data exposures, or near misses where the root cause is an AI system.

61% of healthcare practices expect a fatal cyberattack within five years.

Over the past 12–18 months, 57% of enterprise CISOs report their enterprises experienced an attack that originated on a remote, mobile, or hybrid device.

More than a third of organizations in the US report attempted cyber attacks occurring daily or even more frequently.

80% of cyber incidents involving medical devices cause moderate or significant disruption to patient care.

Manufacturing accounted for more than one in four of all global cyberattacks in 2025 and had been the most targeted industry for five consecutive years.

56% of cyberattacks on healthcare organizations target U.S.-based organizations.

Healthcare organizations are being hit by cyberattacks about every 10 hours.

36% of organizations cite cyberattacks as a top emerging threat.

42% of organizations that experienced a cyber incident report customer or constituent disruption.

41% of organizations that experienced a cyber incident report financial loss or revenue impact.

32% of organizations experienced more than one cyber attack in the last 12 months.

83% of organizations in crypto and decentralized finance, 79% in retail, and 76% in manufacturing experienced cyber attacks.

47% report operational shutdown, 41% report data loss, 41% report reputational damage, and 40% report lost revenue as impacts of cyber attacks in the last 12 months.

The education sector was the most targeted industry in March, experiencing an average of 4,632 cyber-attacks per organization per week, a 6% decrease year over year.

The average number of weekly cyber-attacks in March per organization reached 1,995, representing a 4% decrease month over month and a 5% decline compared to March 2025.

Hospitality, Travel & Recreation recorded a 30% year-over-year increase in attacks in March 2026.

73% of US IT and security professionals at companies with at least 1,000 employees identify increasing backup data security as their top-ranked defense against AI-powered cyberattacks.

89% of US IT and security professionals at companies with at least 1,000 employees say AI-powered cyberattacks make them more concerned about their organization’s data safety.

High- and medium-severity attacks surged 20.8% to more than 13 billion hits.

79% of US IT and security professionals at companies with at least 1,000 employees say AI-powered attacks gaining access to backups is their top concern.

36% of CNI organisations reported increasing cyber budgets in response to an incident

50% of CNI organisations said IT disruption/outage was the top impact of a cyber attack.

32% of respondents from CNI organisatins cited the complexity of cloud environments as the root causes of cyber incidents.

Organizations experienced an average of 16 cyberattacks in the past 12 months.

50% of enterprises' cyberattacks involved malicious insiders.

Telecommunications was the third most targeted sector, averaging 2,699 weekly attacks per organization, up 6% year over year.

Europe and North America both experienced notable increases in the number of attacks compared to February 2025, with +11% and +9% growth respectively.