80% of large U.S. companies rank protecting customer data as 'very' or 'critically' important for data sovereignty.

The average initial ransomware demand increased 70% to $4.2 million compared to the previous year.

In 2025, lawsuits were filed in 68 of 482 disclosed data security incidents, up from 51 of 518 in 2024.

Phishing was the leading cause of data security incidents, accounting for 30%.

Routers and switches average nearly 32 vulnerabilities per device.

18% of digital trust professionals believe their CIO or CTO would have ultimate responsibility for AI.

Application delivery controllers (ADCs) accounted for 22% of the top 50 targeted network devices.

Qilin was the most seen ransomware variant in 2025.

The financial sector accounted for 14.6% of incidents.

60% of the top 20 terms appearing in phishing subject lines were the same in 2024 and 2025, such as “request,” “invoice,” “payment,” “email,” “fwd,” “message,” “report,” and “meeting.”

Nearly 90% of retail and hospitality CISOs expect spending on AI-related security initiatives to rise, often through reallocating existing budgets rather than adding new funds.

One-third of bank leaders say they do not understand agentic AI at all.

Only 30% of business partner users get full permissions on first access

43% of CFOs say AI is adding new layers of workload complexity that complicate forecasting and cost control.

45% of organizations use AI-powered cloud spend analytics.

The attack rate at login jumped 216%.

70% of retail and hospitality CISOs report that AI has been added to their scope of responsibility.

54% of retail and hospitality CISOs expect budget increases in 2026.

In 2025, more than 90% of open source vulnerability (OSV) malware advisories were reported, a 14x increase over the past two years.

79% of board chairs and independent directors say the board reviews and approves the bank’s cybersecurity strategy.