2.61% of organizations were unsure or could not answer regarding their average downtime after a cyber incident.

20.82% of organizations reported average downtime of less than 5 hours after a cyber incident.

Organizations experienced an average downtime of 37 hours after a cyber incident.

Respondents in the transportation industry reported the highest average amount of downtime at 74 hours.

23.99% of organizations reported average downtime of 2 days after a cyber incident.

Nearly one third of organizations reported downtime extended for two days or more after a cyber incident.

6.94% of organizations reported average downtime of 4-6 days after a cyber incident.

14.66% of organizations reported average downtime of 3 days after a cyber incident.

59.2% of security and IT decision-makers in the technology sector perceive the public cloud as a significant cybersecurity risk in 2024

The CDK Global attack resulted in over a billion dollars in estimated losses for the automotive industry.

The average ransomware payout was $3.6 million

Midnight was detected in 23.3% of cybersecurity incidents over the last 12 months.

20.5% of government sector threats were attributed to Fin7 in 2024.

33.3% of government sector threats were attributed to Black Basta in 2024.

19.4% of IT and security decision-makers reported software vulnerabilities as the second-most common entry point for attackers.

20% of organizations in the healthcare sector experienced ransomware incidents annually.

7.2% of IT and security decision-makers reported insider threats as a means of infiltration.

The percentage of organizations experiencing 20 or more ransomware incidents annually increased from 0% to 3% year-over-year.

Organizations experienced an average of 5 to 6 ransomware incidents over the last 12 months, marking a 25% decrease from nearly 8 incidents in 2024.

CDK Global reported a ransom payment of $50 million