The average cost of a healthcare data breach has reached $9.8 million. This average cost is nearly twice as high as the cross-industry average of $4.45 million, according to industry reports.

The overall reporting rate for advanced text-based email threats was just 1.46%.

Commerce websites attracted the largest proportion of unwanted bot traffic at 39%.

7% of VEC engagements came from employees who had engaged with a previous attack.

37% of all observed internet traffic originated from bots.

A 48% spike in sign-up attacks occurred in the third quarter of 2024, aligning with major events like the Super Bowl and U.S. elections.

AI saves security teams an average of 12 hours per week on manual processes.

In just 12 months, attackers attempted to steal more than $300 million via VEC.

49% of manufacturers planning to use AI for cybersecurity in 2025. This is up from 40% in 2024 for using AI for cybersecurity

In El Salvador, threat actors make 20x more targeting gaming companies compared to those working as software developers.

Nearly 70% of security professionals believe AI also contributes to burnout.

The top three attack points used are account sign-up, sign-in, and account management

Five of the most targeted industries are technology, social media, gaming, retail, and fintech.

38% of respondents were unable to differentiate between machine learning and deep learning.

Employees in large enterprises engaged with malicious vendor messages 72% of the time after reading them, taking follow-up actions such as replying or forwarding.

Repeat engagement with VEC in EMEA is the highest of any region, over twice that of BEC.

Manufacturers investing in generative and causal AI increased 12% year-over-year.

Cybersecurity ranks as the second biggest external risk among manufacturers.

Over 259 million Americans — roughly 81% of the population — had their protected health information (PHI) compromised in 2024.

Attacks on the commerce industry doubled, rising from 15% of all observed attacks in Q1 2024 to 31% of all observed attacks in Q1 2025.