28% of intrusions investigated resulted in data theft that bore indications of extortion.

Publisher	Google Cloud
Report	Cloud Threat Horizons Report H1 2026
Published	10 March 2026
Topics	Data Theft, Extortion

Published by Google Cloud in Cloud Threat Horizons Report H1 2026, 10 March 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

60% of US organizations confirm sensitive data theft in ransomware incidents.

Proofpoint, 25/07/2026

Almost two-thirds of organizations confirm that data is stolen during ransomware incidents.

Proofpoint, 25/07/2026

60% of US organizations confirm sensitive data theft during ransomware incidents.

Proofpoint, 25/07/2026

49% of organizations did not detect the threat until after data is stolen, up from 31% the previous year.

ExtraHop, 28/06/2026

In September 2025, Qilin's compromise of a single South Korean MSP affected 32 financial institutions and resulted in over 2 terabytes of stolen data.

Black Kite, 06/06/2026

When identity breaches impact business, the primary consequences are data theft (49%), ransomware (48%), and financial theft (47%).

Sophos, 27/05/2026

Get the newsletter

Weekly cybersecurity statistics by email.