Cyber Crime Statistics 2026: The Most Important Numbers and Trends Explained

Cybercrime continues to reshape how businesses, governments, and consumers operate online. From ransomware attacks that disrupt hospitals to phishing campaigns targeting financial institutions, cyber threats now affect nearly every industry. Organizations use cybercrime data to improve security investments, while policymakers rely on these statistics to strengthen digital regulations and national defense strategies. Explore the latest cybercrime statistics to understand the scale, cost, and evolving nature of today’s digital threats.

Editor’s Choice

• Global cybercrime costs are projected to reach $10.5 trillion annually, making cybercrime one of the largest economic threats worldwide.
• The average global data breach cost fell to $4.44 million in 2025, down from $4.88 million in 2024 due to the broader adoption of AI-driven security tools.
• U.S. organizations reported an average breach cost of $10.22 million in 2025, the highest recorded globally.
• The FBI received nearly 860,000 cybercrime complaints in 2024, resulting in $16.6 billion in reported losses.
• Phishing, extortion, and personal data breaches ranked as the top three reported cybercrimes in 2024.
• Organizations reduced breach response times to 241 days on average in 2025, the fastest level reported in nine years.
• Cryptocurrency-related investment fraud generated more than $6.5 billion in losses during 2024.
• Ransomware complaints rose from 3,156 incidents in 2024 to 3,611 incidents in 2025.
• Americans aged 60 and older lost nearly $5 billion to cybercrime in 2024, more than any other demographic group.
• Security AI and automation reduced average breach costs by approximately $1.9 million per incident in 2025.

Recent Developments

• The FBI reported $16.6 billion in cybercrime losses during 2024, representing a 33% increase from the previous year.
• Global ransomware payments declined to $813 million in 2024, down from $1.25 billion in 2023.
• Security AI adoption helped lower the global average breach cost by 9% year over year in 2025.
• Cyberattacks increased by approximately 30% year over year during Q2 2024.
• More than 16% of modern breaches now involve AI-related attack or defense activity.
• Law enforcement disruptions contributed to the takedown of major ransomware groups, including operations targeting LockBit.
• The IC3 identified 63 new ransomware variants during 2025, averaging over five new variants per month.
• Critical infrastructure organizations reported 655 ransomware incidents in 2025, highlighting continued targeting of essential services.
• Security teams shortened breach detection and containment times by 51 days when extensive AI tools were deployed.
• Cyber-enabled fraud accounted for nearly 85% of all reported cybercrime losses in 2025.

Global Cyber Crime Statistics

• Cybercrime is expected to generate $10.5 trillion in annual damages, exceeding the GDP of many major economies.
• Global cybercrime damages may climb to $15.63 trillion annually by 2029 if current growth rates continue.
• Organizations worldwide experienced a 30% increase in cyberattacks during 2024 compared to the previous year.
• The average organization requires 241 days to identify and contain a breach.
• Nearly 70% of data breaches cause significant operational disruption to affected organizations.
• Cybercrime complaints surpassed 1 million reports in 2025, according to federal reporting data.
• More than 200 ransomware variants were actively tracked by investigators during 2025.
• Global cybersecurity spending continues to rise as organizations increase investments in AI-powered protection tools.
• Researchers estimate measurable global cybercrime damages at roughly $500 billion annually, excluding several indirect impacts.
• Cybercrime remains one of the fastest-growing forms of transnational crime, affecting businesses, governments, and consumers alike.

Cybercrime Cost Growth Statistics

• Global cybercrime costs are projected to surge from $0.86 trillion in 2018 to $13.82 trillion in 2028, a more than 16x increase.
• Cybercrime damages crossed the $1 trillion mark in 2019, reaching $1.16 trillion worldwide.
• The annual cost of cybercrime nearly tripled from $2.95 trillion in 2020 to $8.15 trillion in 2023.
• Worldwide cybercrime losses are expected to exceed $10 trillion in 2025, totaling $10.29 trillion.
• Cybercrime costs are forecast to grow by $4.60 trillion between 2024 ($9.22T) and 2028 ($13.82T).
• Global cybercrime damages are projected to reach $11.36 trillion in 2026, setting a new record high.
• Annual cybercrime costs are expected to increase by $1.07 trillion between 2026 and 2027 alone.
• Cybercrime losses are forecast to climb from $5.49 trillion in 2021 to $7.08 trillion in 2022, an increase of $1.59 trillion.
• The estimated global cost of cybercrime is expected to surpass $12 trillion in 2027, reaching $12.43 trillion.
• Between 2018 and 2028, cybercrime is projected to add nearly $13 trillion in annual economic damage worldwide.

Data Breach Cyber Crime Statistics

• The global average cost of a data breach reached $4.88 million in 2024, the highest level ever recorded at that time.
• Average breach costs fell to $4.44 million in 2025 due to faster incident response and AI adoption.
• Organizations now require an average of 241 days to identify and contain a breach.
• U.S. data breaches cost organizations approximately $10.22 million per incident.
• More than half of breached organizations reported cybersecurity staffing shortages during investigations.
• Security AI reduced breach lifecycle duration by 51 days compared with organizations lacking AI tools.
• Organizations with AI-powered defenses saved roughly $1.9 million per breach.
• Around 70% of breaches caused significant business disruption, including operational downtime and lost productivity.
• Mixed cloud, on-premises, and container environments increased recovery complexity and costs.
• Healthcare remains among the costliest sectors for data breaches globally.

Ransomware Attack Cyber Crime Statistics

• The FBI received 3,156 ransomware complaints in 2024.
• Reported ransomware complaints increased to 3,611 incidents in 2025.
• Critical infrastructure organizations accounted for 655 ransomware reports in 2025.
• Ransomware remained the top cyber threat to U.S. critical infrastructure during 2024.
• Complaints involving ransomware attacks on critical infrastructure increased 9% year over year in 2024.
• Investigators tracked more than 200 ransomware variants in 2025.
• The IC3 identified 63 newly emerging ransomware variants during 2025 alone.
• Global ransomware payments dropped to $813 million in 2024, down more than one-third from 2023.
• Ransom demands exceeded actual payments by approximately 53%, reflecting increased refusal rates among victims.
• Akira, Qilin, BianLian, Play, and INC Ransom ranked among the most frequently reported ransomware families in 2025.

Key Brand Abuse Threat Statistics

• Microsoft dominated brand abuse threats with 68 million incidents, far exceeding every other brand monitored.
• Adobe ranked second with 9.4 million brand abuse threats, representing a significant phishing target.
• DHL recorded 8.8 million threats, highlighting continued abuse of delivery and logistics brands.
• Google faced 6.1 million brand abuse threats, making it one of the most impersonated tech companies.
• AOL accounted for 4.4 million threats, showing persistent exploitation despite its smaller market presence.
• DocuSign experienced 3.5 million brand abuse threats due to its widespread use in digital document workflows.
• Amazon registered 3.1 million threats, reflecting ongoing phishing activity targeting online shoppers.
• Microsoft’s 68 million threats were more than 7 times higher than Adobe’s 9.4 million, the second-highest figure.
• Office 365 alone was linked to over 20 million phishing and scam attempts leveraging its brand name.
• The data shows that technology, logistics, and e-commerce brands remain prime targets for cybercriminal impersonation campaigns.

Phishing and Social Engineering Cyber Crime Statistics

• Phishing remained the most frequently reported cybercrime in the United States, with 193,407 complaints filed in 2024.
• Cybercriminals used phishing or pretexting techniques in 16% of all global data breaches in 2025.
• Business email compromise (BEC) and phishing-related fraud generated over $2.9 billion in reported losses during 2024.
• Approximately 91% of cyberattacks begin with a phishing email, according to enterprise security research.
• More than 3.4 billion phishing emails are sent every day worldwide.
• Mobile users are increasingly targeted, with phishing attacks on smartphones growing by more than 50% year over year.
• Credential theft accounted for nearly one-third of phishing campaign objectives in 2025.
• Employees clicked on phishing links in roughly 8% of simulated phishing tests conducted globally during 2024.
• QR-code phishing, commonly called “quishing,” increased by over 50% in enterprise environments during 2025.
• Voice phishing (vishing) attacks rose sharply as threat actors adopted AI-generated voice cloning technology.

Malware and Vulnerability Cyber Crime Statistics

• Malware was involved in approximately 58% of cyberattacks worldwide during 2024.
• More than 30,000 new software vulnerabilities were disclosed in 2024, setting a new annual record.
• The average organization experienced more than 1,600 cyberattacks per week during 2025.
• Infostealer malware infections increased by over 60% year over year as attackers targeted browser credentials and crypto wallets.
• Remote code execution vulnerabilities represented nearly 20% of critical security flaws disclosed in 2025.
• Organizations took an average of 55 days to remediate critical vulnerabilities after disclosure.
• Zero-day exploits appeared in 97 publicly reported incidents during 2024, one of the highest totals on record.
• Endpoint malware detection rates improved due to AI-powered threat monitoring, reducing dwell time significantly.
• Supply-chain malware attacks continued to grow, affecting software vendors, healthcare providers, and government agencies.
• Nearly 76% of successful breaches exploited known vulnerabilities that lacked timely patching.

Data Breach Costs by Industry Statistics

• Healthcare faced the highest average data breach cost at $7.42 million, significantly above all other industries.
• The Financial sector recorded the second-highest breach cost at $5.56 million per incident.
• Industrial organizations experienced an average breach cost of $5.00 million, crossing the $5 million mark.
• Energy companies incurred an average data breach cost of $4.83 million, ranking fourth overall.
• Technology firms reported average breach losses of $4.79 million, highlighting persistent cyber risks.
• Pharmaceuticals faced average breach costs of $4.61 million, reflecting the value of sensitive health data.
• The Services industry saw breaches cost an average of $4.56 million per incident.
• Entertainment companies recorded an average data breach cost of $4.43 million.
• Media organizations experienced average breach expenses of $4.22 million.
• Hospitality businesses faced average breach costs of $4.03 million, exceeding the $4 million threshold.
• Transportation sector breaches cost an average of $3.98 million per incident.
• Educational institutions reported average breach costs of $3.80 million.
• Research organizations incurred average breach losses of $3.79 million, nearly matching education.
• Communications companies experienced average breach costs of $3.75 million.
• The Consumer sector recorded average data breach expenses of $3.72 million.
• Retail businesses faced average breach costs of $3.54 million, among the lowest in the private sector.
• The Public Sector had the lowest average breach cost at $2.86 million, over 61% lower than healthcare.

Identity Theft and Consumer Fraud Cyber Crime Statistics

• Identity theft generated more than 1.1 million reports from consumers during 2024.
• Americans lost approximately $12.5 billion to fraud in 2024, representing a significant increase from the previous year.
• Investment-related fraud accounted for the highest financial losses, exceeding $5.7 billion.
• Consumers aged 60 and older reported nearly $5 billion in cybercrime losses during 2024.
• Synthetic identity fraud continues to be one of the fastest-growing forms of financial crime in North America.
• Credit card fraud represented one of the most common identity theft categories reported to federal agencies.
• Consumers who lost money to imposter scams reported median losses exceeding $800 per case.
• Online shopping scams remained among the top fraud categories affecting younger consumers.
• More than 40% of fraud reports originated through digital channels, including websites, apps, and social platforms.
• Identity verification technologies helped reduce account takeover fraud by double-digit percentages across financial institutions.

Artificial Intelligence (AI) Cyber Crime Statistics

• AI-assisted cyberattacks increased significantly in 2025 via automated phishing and malware.
• AI-powered security tools saved organizations an average of $1.9 million per data breach.
• Deploying AI and automation reduced breach response times by approximately 51 days.
• Deepfake-related fraud incidents increased globally by more than 200% from 2023 to 2025.
• Nearly one in six data breaches involved AI-related attack or defense activity in 2025.
• Financial institutions reported a sharp rise in AI-generated impersonation attacks.
• Generative AI tools enabled cybercriminals to launch personalized phishing campaigns at scale.
• AI-powered fraud detection systems blocked billions of suspicious login attempts in 2025.
• More than 70% of security leaders identified generative AI misuse as a major concern.
• AI-driven threat intelligence shortened incident investigation times by up to 40%.

Leading Cyber Crime Groups Statistics

• Lazarus Group leads all affiliated cybercrime groups with 26%, making it the most prominent threat actor in the dataset.
• SandWorm, APT 28, and APT 28-linked operations each account for 15%, forming a strong second tier of cyber threats.
• The combined share of SandWorm and APT 28-related activity reaches 45%, highlighting their significant global presence.
• Gamaredon represents 10% of tracked cybercrime affiliations, placing it among the top five groups.
• Winnti Umbrella also holds 10%, matching Gamaredon’s share of global cybercrime activity.
• Mustang Panda contributes 9%, making it the smallest group among the top seven tracked actors.
• The gap between Lazarus Group (26%) and the next highest groups (15%) is 11 percentage points, showing a clear lead.
• The top four groups together account for 71% of all recorded cybercrime affiliations in the chart.
• The bottom three groups collectively represent 29%, indicating a more fragmented threat landscape beyond the leading actors.
• East Asian and Eastern European-linked groups dominate the rankings, reflecting their continued influence in global cyber operations.

Cloud and Mobile Device Cyber Crime Statistics

• Over 45% of data breaches involved cloud-based assets during 2025.
• Misconfigured cloud environments remained one of the leading causes of cloud security incidents worldwide.
• Mobile phishing attacks increased by more than 50% year over year as attackers targeted smartphone users.
• More than 60% of corporate data now resides in cloud environments, expanding the attack surface for cybercriminals.
• Cloud-related security incidents cost organizations millions in recovery, compliance, and downtime expenses annually.
• Approximately 82% of organizations experienced at least one cloud security incident during the past year.
• Public cloud workloads remain a primary target for credential theft and ransomware operators.
• Mobile malware attacks increased as cybercriminals targeted banking applications and digital wallets.
• Organizations with mature cloud security programs reduced breach costs by nearly 20% compared with less-prepared organizations.
• Bring-your-own-device (BYOD) environments continue to increase enterprise mobile security risks.

Business Email Compromise Cyber Crime Statistics

• In 2025, business email compromise generated $3.05 billion in reported losses across 24,768 complaints.
• Global business email compromise losses exceeded $55.5 billion in exposed funds between 2013 and 2023.
• Approximately 73% of all reported cyber incidents in 2024 were attributed to business email compromise.
• Account takeover incidents linked to business email compromise resulted in $359.7 million in losses in 2025.
• Nearly 40% of business email compromise phishing messages were flagged as AI-generated by early 2024.
• The average business email compromise wire fraud incident caused financial losses reaching $286,000 per attack.
• Over 86% of business email compromise financial losses were transmitted via wire transfer or ACH.
• Around 63% of organizations experienced business email compromise targeted specifically at their wire transfer payments.
• An estimated $30 million in enterprise losses was directly linked to business email compromise scams with an AI nexus.
• Organizations with fewer than 1,000 employees face a 70% weekly probability of a business email compromise attack.

Small Business Cyber Crime Statistics

• Nearly 43% of all cyberattacks target small businesses, despite their limited IT resources.
• Approximately 60% of small businesses close within six months of a major cyberattack.
• Around 47% of small businesses experienced a cyberattack during the past year.
• Ransomware remains one of the most damaging threats, with small firms often paying a larger share of revenue for recovery than large enterprises.
• More than 50% of small businesses lack a formal cybersecurity plan, increasing exposure to phishing and malware attacks.
• The average cost of a cyber incident for small and medium-sized businesses exceeded $250,000 in recent industry surveys.
• Email compromise, credential theft, and payment fraud rank among the most common attack methods affecting small businesses.
• Small businesses with fewer than 100 employees are significantly less likely to deploy multi-factor authentication across all accounts.
• Cyber insurance adoption among small businesses increased during 2025 as ransomware and fraud losses continued to rise.
• Security awareness training remains one of the most cost-effective defenses for small business environments.

Cryptocurrency Cyber Crime Statistics

• Cryptocurrency-related fraud caused more than $6.5 billion in reported losses during 2024.
• Reported crypto-related losses increased to approximately $9.3 billion in 2025, according to federal reporting.
• Investment scams accounted for the majority of cryptocurrency fraud losses.
• Americans aged 60 and older reported over $2.8 billion in cryptocurrency fraud losses during 2025.
• Global ransomware payments totaled approximately $813 million in 2024, with most transactions occurring through cryptocurrency.
• Cryptocurrency theft from exchanges, wallets, and decentralized finance platforms exceeded $2 billion globally in 2024.
• North Korea-linked threat groups remained among the largest cryptocurrency theft actors worldwide.
• Fraudsters increasingly use stablecoins and privacy-enhancing technologies to obscure illicit transactions.
• Blockchain analytics and law enforcement actions helped recover hundreds of millions of dollars in stolen crypto assets.
• Cryptocurrency continues to play a major role in ransomware, investment fraud, and money-laundering operations.

Country-Level and Geographic Cyber Crime Statistics

• The United States recorded over $16 billion in reported cybercrime losses during 2024, marking a 33% increase from the previous year.
• UK businesses experienced approximately 6.04 million instances of fraud in 2024, with the mean cost per victim reaching £2,090.
• In India, digital financial fraud drained Rs. 4,245 crore across 2.4 million incidents during the first 10 months of 2024-25.
• The Canadian Anti-Fraud Centre logged 108,878 fraud reports in 2024, with reported losses totaling $643.7 million CAD.
• Malware-driven banking fraud cases in Latin America surged by 113% over the 12-month period ending in late 2024.
• Nigerian financial institutions lost ₦52.26 billion to fraud in 2024, while total annual cybercrime losses across Africa are estimated at $3.5 billion.
• Investment scams accounted for 49% of the total $643.7 million CAD lost to fraud in Canada during 2024.
• Identity fraud across Africa increased by 167% in 2024, with some nations recording growth rates exceeding 300%.

Cyber Crime Victim Demographics Statistics

• Americans aged 60 and older lost nearly $4.9 billion to cybercrime during 2024.
• Reported losses among seniors surged by 37% to reach $7.7 billion in 2025.
• Victims aged 20 to 29 filed 112,069 complaints, resulting in $563 million in losses.
• Adults between 30 and 39 submitted 153,293 complaints with losses totaling $1.7 billion.
• Victims aged 40 to 49 reported 167,066 complaints leading to $2.96 billion in damages.
• Adults aged 50 to 59 filed 124,820 complaints with financial losses reaching $3.7 billion.
• Minors under age 20 accounted for 31,254 complaints and reported $67.1 million in losses.
• Over 12,000 elderly victims individually lost more than $100,000 to cyber fraud in 2025.
• Online personal data exposure enabled 72% of elder fraud cases during 2024.

Cybersecurity Defense and Mitigation Cyber Crime Statistics

• Organizations using security AI and automation saved an average of $1.9 million per breach.
• AI-enabled security teams reduced breach identification and containment times by approximately 51 days.
• Multi-factor authentication can block more than 99% of automated account compromise attempts.
• Companies with incident response testing programs experienced $2.66 million lower average breach costs.
• Zero Trust security adoption lowered average data breach costs by approximately $1.5 million across enterprise environments.
• Security awareness training reduced employee phishing susceptibility rates by more than 50%.
• Organizations that encrypt sensitive data experience up to 29% lower breach-related financial losses.
• Cybersecurity workforce demand surpassed 4.8 million unfilled positions worldwide.

Frequently Asked Questions (FAQs)

Conclusion

Cybercrime remains one of the most significant economic and security challenges facing organizations and consumers. The latest statistics show rising financial losses, increasingly sophisticated ransomware operations, widespread phishing activity, and growing misuse of artificial intelligence by threat actors. At the same time, organizations are making progress through AI-powered defenses, Zero Trust frameworks, stronger identity controls, and faster incident response capabilities.

Looking ahead, cybersecurity success will depend on a combination of technology, employee awareness, regulatory cooperation, and proactive risk management. Businesses that invest in prevention, detection, and recovery strategies will be better positioned to withstand the evolving cyber threat landscape. As cybercrime continues to expand across industries and regions, data-driven security decisions will remain critical for reducing risk and protecting digital assets.