Cyber Incident
We've curated 44 cybersecurity statistics about cyber incidents to help you understand how breaches, attacks, and vulnerabilities are impacting organizations and shaping security practices in 2025.
Showing 21-40 of 44 results
57% of CISOs report that half or fewer of their security tools deliver measurable Return on Investment (ROI).
39% of CISOs say they often feel blamed, even when incidents fall outside their direct control.
82% of CISOs say they are under pressure from executives or boards to reduce staff using AI.
59% of CISOs cite agentic AI as their leading near-term threat.
44% of CISOs rank board or executive expectations as their number-one stressor.
17% of CISOs say they always feel personally blamed for security incidents, regardless of the root cause.
Nearly 20% of recent incidents reported by CISOs were already AI-related.
Boards most often ask CISOs for the following metrics: risk-reduction trendlines (51%), quantified business impact (47%), and incident-response performance metrics (40%).
Data breaches accounted for 17.4% of cyber incidents affecting public administration in the EU in 2024.
65% of CISOs manage 20 or more security tools.
72% of healthcare organizations experienced a moderate to severe financial impact from cyber incidents in the past two years.
Over 70% of healthcare organizations reported significant financial, operational, or clinical disruptions due to cyber threats in the past year.
69% of cyber incidents in 2024 targeted central governments in the EU.
60% of all reported cyber incidents in 2024 were Distributed Denial-of-Service (DDoS) attacks.
71% of higher education institutions demonstrate confidence, saying their school is prepared for a major cyber incident.
73% of U.S. CISOs reported facing a significant cyber incident in the past six months.
Hacktivists were responsible for nearly 63% of cyber incidents in the EU in 2024.
Nearly three in four companies report that the impact of cyber incidents in the past year has been severe or moderate.
Top Shares of Recorded Incidents by Sector in the EU: 38.2%: Public Administration, 28.5%: Unknown, 7.5%: Transport (second most targeted sector), 4.8%: Finance, 4.5%: Energy, 2.9%: Education, 2.3%: Health, 2.2%: Digital Infrastructure & Services, 1.7%: Manufacturing, 1.2%: Media & Entertainment.
Public Administration was the most targeted sector in the EU, accounting for just over 38% of incidents.