The top consequences of breaches reported were operational downtime (71%), reputational damage (45%), and financial loss (41%)

32% of Canadians say they are more likely to open a financial account digitally than they were a year ago.

Only 37% of organisations have policies to manage AI or detect shadow AI.

The average cost of an extortion or ransomware incident remains high, particularly when disclosed by an attacker ($5.08 million).

Nearly all organisations studied suffered operational disruption following a data breach.

Of organisations that experienced attacks, 38% of breaches stemmed from compromised employee credentials.

51% of organizations have adopted AI for mission-critical operations.

Social engineering attacks accounted for 39% of initial access incidents observed during the first half of 2025.

For the third year running, cyber is identified as the leading cause of downtime and data loss in the UK.

Organizations experience an average of six mission-critical workflow disruptions or failures in the past year.

49% of Canadians reported experiencing more frequent identity verification checks during online purchases.

34% of organisations have failed a compliance audit due to identity-related issues.

In real-world situations within the private sector, if a ransom payment ban were to take hold, only 10% of UK business leaders said they would comply if they were attacked.

85% of organisations are "extremely" or "very" confident in their ability to detect breaches within 24 hours.

2% of organizations have no plans to address quantum risks at all.

Risk perception varies by role: 53% of VPs and directors believe their organizations are unprepared for quantum risks, compared to 35% of C-suite executives.

Non-Business Email Compromise (BEC) incidents rose by 214%.

Nearly one-third of Canadians view first-party fraud, such as providing false information on financial applications, as acceptable in certain circumstances or even normal behaviour.

72% of UK organisations believe AI will strengthen security in the years ahead

96% of surveyed UK business leaders from companies with revenues of £100 million+ believe that ransomware payments should be banned across both public and private sectors.