The finance sector had an average ransom payment of $3.8 million

The government sector had an average ransom payment just below $7.5 million

The Ticketmaster/Live Nation breach exposed the personal and financial information of 560 million customers.

The ransomware attack against Change Healthcare involved the exfiltration of sensitive data belonging to an estimated 192.7 million individuals, making it the largest healthcare data breach on record.

The average downtime per cybersecurity incident was 37 hours

70% of organizations experienced ransomware incidents in the last year

Organizations estimated that ransomware actors had access to their systems for an average of 2 weeks

61.6% of security and IT decision-makers in the U.S. perceive the public cloud as the highest cybersecurity risk in 2024

53.8% of global security and IT decision-makers identified the public cloud as a significant cybersecurity risk to their organization in 2024

The average length of time to respond to and contain a security alert was 2 weeks

43.7% of organizations surveyed identified third-party services and integrations as a concern, tying with public cloud as the number one risk within the telecom industry.

RansomHub was detected in 26.8% of cybersecurity incidents over the last 12 months.

Scattered Spider was detected in 22.0% of cybersecurity incidents over the last 12 months.

28.2% of government sector threats were attributed to Midnight Blizzard/APT29/Nobellium/Cozy Bear in 2024.

LockBit registered a 37% detection rate in Germany, indicating a significantly elevated threat compared to other regions in 2024.

13.0% of IT and security decision-makers cited software misconfiguration as a common entry point for attackers.

33.7% of IT and security decision-makers identified phishing and social engineering as the most common infiltration methods in their attacks.

Almost 25% of respondents reported detections related to the Scattered Spider group over the last year.

12.2% of IT and security decision-makers noted that compromised credentials are increasingly becoming a primary gateway for attackers.

Organizations in the UAE paid ransoms that were 26% higher than the global average, with an average payment of $5.4 million