Average downstream breach victims per vendor increased from 2.46 in 2021 to 5.28 in 2025.

May 27, 2026

Third-Party Risk Human Impact Breach Victims

Average downstream breach victims per vendor increased from 2.46 in 2021 to 5.28 in 2025. — This cybersecurity statistic was published by Black Kite in May 2026. It covers topics including Third-Party Risk, Human Impact, Breach Victims. The original data appears in 2026 Third-Party Breach Report: Managing Risk Concentration in the Era of Cascading Failures. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 3/7/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

Average downstream breach victims per vendor increased from 2.46 in 2021 to 5.28 in 2025. This data was published by Black Kite and covers Third-Party Risk, Human Impact, Breach Victims.

Where does this data come from?

This statistic comes from 2026 Third-Party Breach Report: Managing Risk Concentration in the Era of Cascading Failures, published by Black Kite on May 27, 2026. You can view the original report at https://content.blackkite.com/ebook/2026-third-party-breach-report/.

What cybersecurity topics does this cover?

This statistic relates to Third-Party Risk, Human Impact, Breach Victims. Browse more statistics on Third-Party Risk or from Black Kite.

CYBERSTATS

Average downstream breach victims per vendor increased from 2.46 in 2021 to 5.28 in 2025.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

16% of security professionals say supply chain and third-party risk is the boardroom cyber priority boards ask about most.

33% of organizations identify third-party vendors as a major visibility gap.

70% of security leaders say their organizations apply risk controls only to key suppliers.

38% of organizations in MEA report reliance on third-party ecosystems and vendors, increasing supply-chain blind spots.

79% of security leaders are concerned or very concerned that suppliers' and partners' AI tool use poses a cybersecurity risk to their organization.

98% of security leaders are concerned about the risks of giving third-party AI-based systems, including large language models, access to company data.

Browse by Topic

Stay Ahead of Cyber Threats