The number of cybersecurity incidents observed between January 1 and May 31 2025 nearly tripled.

Healthcare breaches remained the most expensive, averaging $7.42 million.

81% of Canadians rate the security of fingerprints and facial recognition as good or excellent.

Of those compromised by an AI-related breach, 97% report not having AI access controls in place.

Over 5,000 highly convincing fake pharmacy websites were uncovered (April-June 2025), scamming people seeking high-demand prescriptions.

56% of mid-sized organizations say they are not ready for quantum computing challenges.

50% of respondents cite cyberattacks as the leading cause of critical workflow disruptions.

In 2H-2024, 44 KEVs were attributed to the North Korean cyber group Silent Chollima.

63% of organisations opted not to pay ransom demands last year, compared to 59% the year prior.

In the past 24 months, 72% of organisations experienced at least one attack.

42% of organizations are actively addressing quantum risk now.

Only 47% of respondents understand the risk profile of their mission-critical workflows.

The average breakout time for attackers (how quickly they move laterally after initial access) is under 60 minutes, and in some cases, less than 15 minutes.

62% of organizations report data leakage of high-value information assets as a fallout from workflow failures.

56% of organizations say they need data loss prevention in their collaboration platforms.

Organisations self-identifying as "Advanced" in their identity posture follow only 4.7 out of 12 best practices.

Three-quarters (or 75%) of UK organisations have conducted security reviews in response to threats in the last 12 months.

Companies that view PQC as a significant undertaking are more than twice as likely to be taking steps now (49%) compared to those that consider the risks minor or overstated (24%).

Organisations that used high levels of shadow AI observed an average of $670,000 in higher breach costs.

More than a third (34%) of UK business leaders who support a proposed ransom payment ban believe it would lead to increased government support and intervention to safeguard cyber resilience.