VendorsAt-Bay
At-Bay
Cybersecurity reports and statistics published by At-Bay
8 categories1 reports
Research Reports
Reports and publications from At-Bay
Recent Statistics & Reports
The vast majority of ransomware started with an attack on a remote access tool, contributing to 80% of attacks.
4/10/2025•
RansomwareRemote access toolRemote access
The average ransom demand was $957K, and the average ransom paid was $317K. This means the price was often negotiated down by more than half.
4/10/2025•
RansomwareRansom
4 of 5 (83%) financial fraud claims began with email.
4/10/2025•
Financial fraudClaimCyber insurance
Ransomware attacks increased by nearly 20% in 2024.
4/10/2025•
Ransomware
VPNs alone accounted for two-thirds (66%) of all ransomware attacks.
4/10/2025•
RansomwareVPN
Mid-sized companies generating $25-100M in revenue saw a 46% increase in ransomware attacks.
4/10/2025•
RansomwareMid-sized companies
The blast radius of ransomware continues to grow as businesses impacted by attacks on vendors and partners increased 43%.
4/10/2025•
RansomwareThird-party attackVendor
The average cost of third-party ransomware incidents jumped by 72% to $241K.
4/10/2025•
RansomwareThird-party attack
Remote access tools like VPNs and RDP were correlated with 80% of ransomware attacks in 2024, up from 63% the year prior.
4/10/2025•
RansomwareRemote access toolsVPNs
The frequency of ransomware attacks in 2024 increased by 19% vs. 2023.
4/10/2025•
Ransomware
Close to 50 ransomware groups were implicated in attacks in 2024, a 3X increase from 2021.
4/10/2025•
RansomwareRansomware group
Severity of ransomware attacks was up 13% in 2024.
4/10/2025•
Ransomware
Overall claims frequency increased by 16% in 2024.
4/10/2025•
ClaimCyber insurance
Only 31% of ransoms were paid by At-Bay customers in 2024. This totaled $146M in unpaid ransoms.
4/10/2025•
RansomwareRansom
Supply chain-driven cyber claims were up 43%.
4/10/2025•
Supply chainCyber claim
Financial fraud remained the most common incident type, accounting for 32% of all claims.
4/10/2025•
Financial fraudClaimCyber insurance
Email was the preferred entry vector for cybercriminals, driving 43% of claims.
4/10/2025•
EmailCyber attackAttack vector