Cybercrime Statistics 2023

As you will see, unlike most horror movie franchises that get progressively less frightening year after year (and eventually become silly), the story here has become even more terrifying.

• Approximately 43% of cyberattacks target SMBs. [Source]
• 60% of SMBs experienced at least one cyberattack in the last year, and 18% of them experienced six or more. [Source]
• 67% of SMBs said that they are more concerned about IT security now than a year ago. [Source]
• 32% of SMBs are allocating less than 5% of their IT budget towards IT security, which is below the recommended minimum amount. [Source]
• The average cyberattack insurance claim cost for SMBs is now $139,000 per claim (all figures in this article are USD), which is more than double the 2021 level. [Source]
• Cyber insurance premium costs have increased by an average of 28%, and many companies are finding it harder to get coverage. [Source]
• The financial toll of a cyberattack on SMBs now ranges from $120,000 to $1.24 million per incident, depending on factors such as the number of compromised records involved. [Source]
• The financial toll of a cyberattack on larger organizations has climbed to $4.54 million per incident — the highest number ever recorded. [Source]
• The number of malware attacks has reached 5.5 billion per year, which is 2% higher than the previous year. [Source]
• Zero-hour threats, which exploit vulnerabilities before they are known and patched, now account for 54% of all threats. [Source]
• Over 850,000 domain names per year are now reported for phishing. [Source]
• 71% of businesses say they have fallen victim to ransomware attacks. [Source]
• Approximately 50,000 websites are hacked each day, and there is an attack on a website every 39 seconds. [Source]
• 18% of all websites are alleged to contain critical severity threats, and 4.1 million websites contain malware at any given time. [Source]
• 17% of all cyberattacks are Business Email Compromise (BEC) attacks, in which hackers try and trick corporate victims into sending money or divulging confidential company information. [Source]
• 74% of organizations are at least moderately vulnerable to insider threats. [Source]
• The average ransomware payment has surged to $4.4 million. [Source]
• It takes an average of 277 days — or roughly 9 months — for businesses to identify and report a data breach. [Source]
• The number of IoT malware attacks annually reported has reached 112.3 million instances — an 87% year-over-year increase. [Source]
• The global cost of cybercrime is predicted to reach $8 trillion annually in 2023. [Source]

Source