Downtime per incident averaged almost 30 hours.

85% of security and IT leaders identify security incidents, data exposures, or near misses where the root cause is an AI system.

61% of healthcare practices expect a fatal cyberattack within five years.

1 in 5 suffered a serious incident linked to AI code

71% say AI has made security incidents harder to detect, investigate, or fix

42% of organizations that experienced a cyber incident report customer or constituent disruption.

41% of organizations that experienced a cyber incident report financial loss or revenue impact.

38% of organizations that experienced a cyber incident report extended downtime of critical systems.

In 2025, 57% of CISOs reported that their organizations took more than 4.5 days on average for full remediation and recovery after a cyber incident.

In 2025, not a single Chief Information Security Officer (CISO) reported being able to recover from a cyber incident within a day.

72% of CISOs agreed that their role has evolved to include leading their organization’s ability to recover continuity following a cyberattack or security incident.

In 2025, 19% of CISOs indicated that recovery efforts from cyber incidents extended as long as two weeks.

89% of schools experienced at least one cyber incident in the past year, primarily phishing, unauthorized access, and malware.

Cybercrime operators accounted for approximately 16% of cyber incidents in the EU in 2024.

Cyberespionage campaigns constituted 2.5% of all reported cyber incidents in the EU in 2024.

13% of CISOs oversee 50 or more security tools.

33% of CISOs rank external threats as their number-one stressor.

87% of CISOs say pressure in their role has increased over the past year.

59% of healthcare organizations faced clinical consequences from cyber incidents, including delayed treatments and compromised patient trust.

90% of CISOs say their role may be at risk to some degree if a breach were to occur.