Cyber Losses Quantified
Global annual cost of cybercrime — projected to grow to $15T by 2029.
U.S. cybercrime losses reported to the FBI's IC3 (Internet Crime Complaint Center) in 2025. Represents reported crimes only — actual losses are far higher. Does not include the separate $225B+ IP theft category.
Annual cost of intellectual property theft to U.S. businesses — primarily state-sponsored.
U.S. crypto-related IC3-reported losses in 2025 — investment fraud and digital asset theft. Subset of the $20.9B total.
AVERAGE COST PER BREACH INCIDENT — BY THREAT TYPE
| Threat Category | Type | Avg. Cost per Incident | Source |
|---|---|---|---|
| Ransomware | Objective | IBM CODB 2025 | |
| Insider Threat | Threat Actor | IBM CODB 2025 | |
| Supply Chain | Atk Surface | IBM CODB 2025 | |
| Data Breach (avg) | Objective | IBM CODB 2025 |
ANNUAL AGGREGATE LOSSES — BY THREAT CATEGORY
| Category | Type | Annual Loss (Global) | Source |
|---|---|---|---|
| Supply Chain | Atk Surface | CyberVentures 2025 | |
| Ransomware | Objective | CyberVentures 2025 | |
| Crypto / Invest. Fraud | Objective | FBI IC3 2025 | |
| BEC / Email Fraud | Vector | FBI IC3 2025 |
RANSOMWARE ECONOMICS
Global ransomware damages in 2025 across all sectors.
Median enterprise ransom payment — down from $2M in 2024 as victim negotiation improves.
Average post-attack recovery cost excluding ransom payment — down from $2.73M in 2024.
AVG. BREACH COST BY INDUSTRY
| Industry | Avg. Breach Cost | Value | Source |
|---|---|---|---|
| Healthcare | $7.42M — #1 for 14 yrs | IBM CODB 2025 | |
| Financial Svcs | $5.20M | IBM CODB 2025 | |
| Manufacturing | $4.47M — 26% of attacks | IBM CODB 2025 | |
| Global Average | $4.44M — first drop in 5 yrs | IBM CODB 2025 |
AVG. BREACH COST BY COUNTRY
| Country | Avg. Breach Cost | Value | YoY |
|---|---|---|---|
| United States | $10.22M — record high | +9% | |
| Middle East | $7.29M | -8% | |
| Benelux | $6.24M | +6% | |
| Canada | $4.84M | +3% | |
| UK | $4.14M | -9% | |
| Germany | $4.03M | -24% | |
| Brazil | $1.22M — lowest | -10% |
INSIDER THREAT & SUPPLY CHAIN — KEY METRICS
Average annual insider risk cost per organization — up from $17.4M in 2024 and $16.2M in 2023.
Average annual cost per organization from negligent insiders — 53% of all insider incidents. Most common and most preventable category.
Global annual cost of software supply chain attacks in 2025 — projected $138B by 2031.
Average days to detect and contain a supply chain breach — longest lifecycle of any initial attack vector.
Average recovery cost per nation-state-sponsored cyberattack — higher dwell time amplifies damage.
Estimated annual cost of Chinese state-sponsored IP theft to U.S. businesses — est. 50–80% of the $225B+ total (IP Commission; FBI).
Peak state-backed cryptocurrency theft in a single year — funds used to finance weapons programs.
Global damage from a single Russian state-deployed attack — the costliest single cyberattack on record.
SPONSOR TYPE — COST & IMPACT PROFILE
| Sponsor Type | Primary Origin | Key Cost Metric | Dominant Method | Financial Motivation |
|---|---|---|---|---|
| Nation-State | China, Russia, Iran, N. Korea | $3.6M / incident | Supply chain backdoors, LotL scripts, zero-day exploits, firmware wipers. | IP theft, sanctions evasion, crypto financing of weapons programs. |
| Cybercriminal | Global syndicates (RaaS) | $5.08M / breach | Ransomware-as-a-Service, credential theft, Initial Access Brokers. | Direct financial extraction — $820M in ransomware payments in 2025 alone. |
| Insider | Internal network | $19.5M / org/yr | Authorized access abuse, shadow data exfiltration, negligence, credential theft. | IP theft for competitors or personal gain; credential monetization on dark web. |
| Hacktivist | Decentralized cells | DDoS disruption | Layer 7 DDoS at 4.8 Tbps peak, defacement, data leaks for reputational damage. | Ideological disruption — financial impact secondary to public embarrassment. |