84% of healthcare organizations include cybersecurity requirements in procurement processes.

56% of healthcare organizations reject devices due to cybersecurity concerns, up from 46% in 2025.

61% of IT leaders report a rise in cybersecurity threats linked to AI.

41% of organizations cite difficulty prioritizing attack paths as a challenge to operationalizing Identity APM.

97% of CISOs say they are confident their endpoint protection would detect attacker behavior

There were 7,831 confirmed ransomware victims globally, a 389% year-over-year increase from approximately 1,600 victims previously.

More than 40% of people who lost money to a scam on social media said it started when they ordered something they’d seen in an ad

$1.1 billion, more than half the money reported lost to scams initiated on social media, was to investment scammers.

Nearly 60% of people who reported losing money to a romance scam in 2025 said it started on a social media platform.

One in three people who reported losing money to a job or business opportunity scam in 2025 said it started on social media.

Just over four in ten businesses (43%) and around three in ten charities (28%) reported having experienced any kind of cyber security breach or attack in the last 12 months.

The median perceived cost of the most disruptive breach or attack was £0 for businesses and £0 for charities, increasing to £30 for medium and large businesses.

The majority of businesses and charities have implemented basic technical controls, such as updated malware protection (81% businesses and 63% charities), backing up data securely via a cloud service (74% businesses and 57% charities), password policies (74% businesses and 56% charities), network firewalls (74% businesses and 45% charities) and restricted admin rights (73% businesses and 65% charities).

The larger the business, the more likely they were to experience cyber crime (17% of micro businesses, 24% of small businesses, 41% f medium businesses and 48% of large businesses).

72% of small businesses experienced fraud, scams, or ransomware last year.

39% of affected small businesses say fraud makes it more difficult to innovate or develop new products.

32% of organizations experienced more than one cyber attack in the last 12 months.

47% report operational shutdown, 41% report data loss, 41% report reputational damage, and 40% report lost revenue as impacts of cyber attacks in the last 12 months.

Nearly 68% of identity crime victims who have not contacted the ITRC have seriously considered self-harm.

21.6% of phishing attacks use redirect chains that route victims through multiple URLs to obscure malicious destinations.