Cyber Incident
We've curated 44 cybersecurity statistics about cyber incidents to help you understand how breaches, attacks, and vulnerabilities are impacting organizations and shaping security practices in 2025.
Showing 1-20 of 44 results
In 2025, 19% of CISOs indicated that recovery efforts from cyber incidents extended as long as two weeks.
72% of CISOs agreed that their role has evolved to include leading their organization’s ability to recover continuity following a cyberattack or security incident.
In 2025, 57% of CISOs reported that their organizations took more than 4.5 days on average for full remediation and recovery after a cyber incident.
In 2025, not a single Chief Information Security Officer (CISO) reported being able to recover from a cyber incident within a day.
89% of schools experienced at least one cyber incident in the past year, primarily phishing, unauthorized access, and malware.
Cybercrime operators accounted for approximately 16% of cyber incidents in the EU in 2024.
Cyberespionage campaigns constituted 2.5% of all reported cyber incidents in the EU in 2024.
90% of CISOs say their role may be at risk to some degree if a breach were to occur.
33% of CISOs rank external threats as their number-one stressor.
54% of CISOs lack standardized, business-relevant metrics.
38% of all reported cyber incidents in the EU in 2024 targeted the public administration sector.
58% of CISOs say incidents occurred even though their security tools were in place.
87% of CISOs say pressure in their role has increased over the past year.
Two-thirds of CISOs report feeling burned out weekly or daily.
13% of CISOs oversee 50 or more security tools.
60% of healthcare organizations reported operational disruptions due to cyber incidents.
73% of U.S. CISOs reported facing a significant cyber incident in the past six months.
Boards most often ask CISOs for the following metrics: risk-reduction trendlines (51%), quantified business impact (47%), and incident-response performance metrics (40%).
59% of healthcare organizations faced clinical consequences from cyber incidents, including delayed treatments and compromised patient trust.
71% of higher education institutions demonstrate confidence, saying their school is prepared for a major cyber incident.