---
title: 10 Cybersecurity Stats You Need to Know
description: Cyber attackers are smart, capable, and only becoming more so as time goes on. With increased vulnerability from public health fears and shuffled work sett
image: https://infusedinnovations.com/hubfs/Imported_Blog_Media/adi-goldstein-EUsVwEOsblE-unsplash-scaled-2.jpg
---

[Technology Architecture & Delivery](https://infusedinnovations.com/blog/tag/technology-architecture-delivery)

# 10 Cybersecurity Stats You Need to Know

by [kristin@infusedinnovations.com](https://infusedinnovations.com/blog/author/kristininfusedinnovations-com)

 4 min read

 September 20, 2021

Cyber attackers are smart, capable, and only becoming more so as time goes on. With increased vulnerability from public health fears and shuffled work settings, individuals and companies have suffered a great deal of attacks in the last couple years. And that's on top of what was already a teeming problem. Some of the numbers may alarm you, especially if you haven't been paying close attention to cybersecurity. Here are ten cybersecurity stats that you should be aware of.

## Cyber crimes have gone up 300% since Covid-19 began.

 The FBI’s Internet Crime Complaint Center (IC3) reported that [cybersecurity complaints](https://www.imcgrupo.com/covid-19-news-fbi-reports-300-increase-in-reported-cybercrimes/) went from around 1,000 a day at the beginning of the pandemic to 3,000-4,000 daily as of late spring this year. By summer it had documented over 12,000 scams that were directly related to Covid-19, such as those that lured individuals to malicious links by promising health information. In other cases hackers have taken advantage of displaced attention, workplace reorganizing, and general social unrest to launch other kinds of attacks, sometimes even to the extent of [warfare](https://infusedinnovations.com/blog/secure-intelligent-workplace/the-role-of-technology-in-russias-invasion-of-ukraine). ![](https://infusedinnovations.com/hs-fs/hubfs/Imported_Blog_Media/touch-screen-1024x681-1-2.png?width=1024&height=681&name=touch-screen-1024x681-1-2.png)

## Up to 95% of breaches could be prevented with user awareness.

 Several sources (like [this one](https://businesspost.ng/technology/human-error-accounts-for-95-of-data-breaches-odumuboni/)) attribute 90-95% of successful cyber attacks to human user error. Things like inadvertent opening of malicious files, using weak or old passwords, or even intentional misconduct on the part of employees end up becoming big vulnerabilities. That's why [cyber literacy training](https://www.cybintsolutions.com/employee-education-reduces-risk/) and [insider risk management](https://infusedinnovations.com/blog/secure-intelligent-workplace/insider-risk-management-with-ai-and-ml) are important in protecting an organization.

## Only 5% of companies' folders are protected properly.

 Conversely and along the same lines, only a small 5% of folders are actually protected as they should be. As Varonis puts it, "Your files called. They want their privacy back." In a [risk assessment](https://www.varonis.com/2019-data-risk-report/) of 54 billion files, they found all kinds of sensitive files that weren't private. Just think how much stronger organizations' files and networks would be by addressing employee awareness and folder protection! ![](https://infusedinnovations.com/hs-fs/hubfs/Imported_Blog_Media/markus-spiske-iar-afB0QQw-unsplash-1024x683-1-2.jpg?width=1024&height=683&name=markus-spiske-iar-afB0QQw-unsplash-1024x683-1-2.jpg)

## The average cost of a data breach is $3.9 million.

 Ouch---that's a big number. And this is just for small- to medium-sized businesses (SMBs). For larger, publicly traded companies, that number goes up to [$116 million](https://www.complianceweek.com/cyber-security/report-average-data-breach-costs-public-companies-116m/29037.article). For many companies, this ends up financially crippling, not to mention the damage to reputation and productivity. A company's share prices also fall after a breach and can trend lower for a while. [Comparitech](https://www.comparitech.com/blog/information-security/data-breach-share-price-analysis/) found that share prices were an average of 8.6% lower a year after a breach and an average of 15.6% lower after three years.

## The industries most vulnerable to attack are government, technology, retail, and healthcare.

 In terms of industries, the healthcare industry suffers the highest average data breach costs at $7.13 million. But even more frequently targeted are government, technology, and retail industries. What these industries share is a large amount of personal indentifying information, so they're a popular aim for cyber attackers. ![](https://infusedinnovations.com/hs-fs/hubfs/Imported_Blog_Media/neon-city-1024x767-1-2.png?width=1024&height=767&name=neon-city-1024x767-1-2.png)

## The average life cycle of a breach is 280 days.

 An [IBM report](https://www.capita.com/sites/g/files/nginej291/files/2020-08/Ponemon-Global-Cost-of-Data-Breach-Study-2020.pdf) showed that last year, it took companies an average of 207 days just to identify a breach. The life cycle until containment averaged 280 days. That's over nine months of finding and recovering from an attack that can be so financially disabling and disruptive to work. Sounds like it's worth it to take every effort to prevent it from happening in the first place.

## 1 in every 323 emails at small companies is a phishing email.

 According to a [Symantec report](https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/threat-landscape-q1-2020) last year, 1 in 4,200 emails in the first quarter of 2020 were phishing emails. That might not sound like bad odds, but think of how many emails you have in your various email inboxes. And if you're in a smaller organization of less than 250 employees, your rate of malicious emails goes up to 1 in 323. This makes small businesses and organizations, including some [nonprofits](https://infusedinnovations.com/blog/secure-intelligent-workplace/empowering-nonprofits-through-challenging-times), the most highly targeted places for email attacks. ![](https://infusedinnovations.com/hs-fs/hubfs/Imported_Blog_Media/philipp-katzenberger-iIJrUoeRoCQ-unsplash-1024x683-2-2.jpg?width=1024&height=683&name=philipp-katzenberger-iIJrUoeRoCQ-unsplash-1024x683-2-2.jpg)

## 1 in 13 web requests leads to malware.

 Another [report](http://images.mktgassets.symantec.com/Web/Symantec/%7B3a70beb8-c55d-4516-98ed-1d0818a42661%7D_ISTR23_Main-FINAL-APR10.pdf?aid=elq_) of Symantec's found 1 in 13 web requests leading to malware. It also found increasing malware variants that were out there. In their report, they stated that this problem was exacerbated by older operating systems that couldn't protect from newer threats. Mobile malware variants were particularly troublesome.

## Supply chain attacks increased by 78% in 2019.

 Supply chain attacks, which penetrate a network through a trusted vendor who becomes compromised, have been steadily increasing over the past several years. In 2019, Symantec reported a sharper increase of 78%. With the [SolarWinds](https://infusedinnovations.com/blog/secure-intelligent-workplace/how-do-you-protect-against-supply-chain-attacks-assume-youre-breached) hack affecting governments and enterprises around the world last year, supply chain attacks have only become an even more troubling concern. ![](https://infusedinnovations.com/hs-fs/hubfs/Imported_Blog_Media/vertical-graphic-1024x681-1-2.png?width=1024&height=681&name=vertical-graphic-1024x681-1-2.png)

## There are about 4 million unfilled cybersecurity jobs in the world.

 One positive result of these otherwise alarming numbers is that there are lots of jobs to be filled. 70% of cybersecurity professionals feel that their organization has a shortage of cybersecurity, and cybersecurity positions grew 350% from 2013 to 2021. Today there are around [4 million unfilled cybersecurity jobs](https://www.netsparker.com/blog/web-security/cybersecurity-skills-gap/) worldwide and the occupation's [unemployment rate is 0%](https://lifars.com/2021/04/cybersecurity-occupation-hit-a-0-unemployment-rate-we-need-more-experts/). Great news if you're a cybersecurity professional looking for work. (And if you are, [we want to hear from you](https://infusedinnovations.com/company#careers)!)

## Cybersecurity Stats Have Real Impacts

 All of these numbers can be dizzying---but not as dizzying (and catastrophic) as it is to have your organization breached. The stats we're faced with are [only getting worse](https://infusedinnovations.com/blog/secure-intelligent-workplace/cyberattacks-in-2021-doubled-those-of-2020), which reflects the importance of cybersecurity and a [Zero Trust](https://infusedinnovations.com/blog/secure-intelligent-workplace/create-your-zero-trust-business-plan) approach. For help cementing your organization's security with the best tools and guidance, [reach out to us](https://infusedinnovations.com/contact-us) today.

#### **Stay connected.** Join the Infused Innovations email list!

#### Share this

[Share on X ](https://x.com/intent/post?url=https://infusedinnovations.com/blog/secure-intelligent-workplace/cybersecurity-stats-you-need-to-know&text=10%20Cybersecurity%20Stats%20You%20Need%20to%20Know) [Share on Facebook ](https://www.facebook.com/sharer/sharer.php?u=https://infusedinnovations.com/blog/secure-intelligent-workplace/cybersecurity-stats-you-need-to-know&t=10%20Cybersecurity%20Stats%20You%20Need%20to%20Know) [Share on LinkedIn ](https://www.linkedin.com/shareArticle?mini=true&url=https://infusedinnovations.com/blog/secure-intelligent-workplace/cybersecurity-stats-you-need-to-know&t=10%20Cybersecurity%20Stats%20You%20Need%20to%20Know)

Previous

[← The Workplace Is Changing — Are You Ready?](https://infusedinnovations.com/blog/secure-modern-workplace/the-workplace-is-changing-are-you-ready)

<https://infusedinnovations.com/blog>

Next

[The Great Resignation and What it Means for Your Company →](https://infusedinnovations.com/blog/secure-intelligent-workplace/the-great-resignation-and-what-it-means-for-your-company)

### You May Also Like

These Related Posts

[Cyberattacks in 2021 Doubled Those of 2020](https://infusedinnovations.com/blog/secure-intelligent-workplace/cyberattacks-in-2021-doubled-those-of-2020)

![](https://infusedinnovations.com/hubfs/Imported_Blog_Media/Copy-of-Copy-of-Webinar-title-slide-21-2.png)

[Technology Architecture & Delivery](https://infusedinnovations.com/blog/tag/technology-architecture-delivery)

#### Cyberattacks in 2021 Doubled Those of 2020

December 6, 2021  5 min read

[Why You Should Never Link Your Personal Email to Work](https://infusedinnovations.com/blog/secure-intelligent-workplace/why-you-should-never-link-your-personal-email-to-work)

[Cybersecurity & Operational Risk](https://infusedinnovations.com/blog/tag/cybersecurity-operational-risk)

#### Why You Should Never Link Your Personal Email to Work

November 1, 2021  3 min read

[Microsoft Adds Campaign Views in Office 365 ATP Stack](https://infusedinnovations.com/blog/secure-intelligent-workplace/campaign-views-in-office-365-atp)

![](https://infusedinnovations.com/hubfs/Imported_Blog_Media/Campaign-views-flow-3.png)

[Technology Architecture & Delivery](https://infusedinnovations.com/blog/tag/technology-architecture-delivery)

#### Microsoft Adds Campaign Views in Office 365 ATP Stack

January 29, 2020  4 min read

### No Comments Yet

Let us know what you think

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "kristin@infusedinnovations.com",
    "url" : "https://infusedinnovations.com/blog/author/kristininfusedinnovations-com"
  },
  "dateModified" : "2024-07-10T04:22:14.982Z",
  "datePublished" : "2021-09-20T04:00:00.000Z",
  "headline" : "10 Cybersecurity Stats You Need to Know",
  "image" : [ "https://infusedinnovations.com/hubfs/Imported_Blog_Media/adi-goldstein-EUsVwEOsblE-unsplash-scaled-2.jpg" ],
  "mainEntityOfPage" : {
    "@id" : "https://infusedinnovations.com/blog/secure-intelligent-workplace/cybersecurity-stats-you-need-to-know",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://infusedinnovations.com/hubfs/ii-logo.svg"
    },
    "name" : "Infused Innovations"
  }
}
```