The statistic shows the number of data breaches in the United States from 2013 to 2019, by industry. In the last measured period, the majority of the 1,473 annual data breaches affected business and medical or healthcare organizations, with 644 and 525 data breaches respectively.
The Government has surveyed UK businesses and charities to find out they approach cyber security and help them learn more about the cyber security issues faced by industry. The research informs Government policy on cyber security and how Government works with industry to make Britain one of the most secure places to do business online. This year’s report also surveyed the education sector for the first time, and analysis of this is published on an experimental basis as an annex to the main report.
25 March 2020
Respondents were asked about their approach to cyber security and any breaches or attacks over the 12 months before the interview. Main survey interviews took place between October and December 2019. Qualitative follow up interviews took place in January and February 2020.
UK
The survey is part of the Government’s National Cyber Security Programme. Cyber security guidance and information for businesses, including details of free training and support, can be found on the https://www.ncsc.gov.uk" class="govuk-link">National Cyber Security Centre website.
The survey was carried out by Ipsos MORI.
This release is published in accordance with the Code of Practice for Statistics (2018), as produced by the UK Statistics Authority. The UKSA has the overall objective of promoting and safeguarding the production and publication of official statistics that serve the public good. It monitors and reports on all official statistics, and promotes good practice in this area.
The document above contains a list of ministers and officials who have received privileged early access to this release. In line with best practice, the list has been kept to a minimum and those given access for briefing purposes had a maximum of 24 hours.
The responsible analyst for this release is Emma Johns. For any queries please contact 07990 602870 or cyber.survey@culture.gov.uk.
The responsible statistician for this release is Rishi Vaidya. For any queries relating to official statistics please contact 020 7211 2320 or evidence@culture.gov.uk.
In 2024, the average cost of an industrial data breach reached its peak with an average of 5.56 million U.S. dollars, up from 4.73 million U.S. dollars in 2023. In comparison, the global average cost of a data breach across all studied industries was 4.88 million U.S. dollars.
As of 2024, the average cost of a data breach in the financial industry worldwide was **** million U.S. dollars, up from **** U.S. dollars in 2024. The global average cost of a data breach across all studied industries was **** million U.S. dollars.
In 2024, the number of data compromises in the United States stood at 3,158 cases. Meanwhile, over 1.35 billion individuals were affected in the same year by data compromises, including data breaches, leakage, and exposure. While these are three different events, they have one thing in common. As a result of all three incidents, the sensitive data is accessed by an unauthorized threat actor. Industries most vulnerable to data breaches Some industry sectors usually see more significant cases of private data violations than others. This is determined by the type and volume of the personal information organizations of these sectors store. In 2024 the financial services, healthcare, and professional services were the three industry sectors that recorded most data breaches. Overall, the number of healthcare data breaches in some industry sectors in the United States has gradually increased within the past few years. However, some sectors saw decrease. Largest data exposures worldwide In 2020, an adult streaming website, CAM4, experienced a leakage of nearly 11 billion records. This, by far, is the most extensive reported data leakage. This case, though, is unique because cyber security researchers found the vulnerability before the cyber criminals. The second-largest data breach is the Yahoo data breach, dating back to 2013. The company first reported about one billion exposed records, then later, in 2017, came up with an updated number of leaked records, which was three billion. In March 2018, the third biggest data breach happened, involving India’s national identification database Aadhaar. As a result of this incident, over 1.1 billion records were exposed.
As of 2024, the average cost of a data breach in Canada was 4.66 U.S. dollars, down from 5.13 million U.S. dollars in the previous year. The global average cost per data breach was 4.88 million U.S. dollars as of 2024, up from 4.45 million U.S. dollars recorded in 2023.
The largest reported data leakage as of January 2025 was the Cam4 data breach in March 2020, which exposed more than 10 billion data records. The second-largest data breach in history so far, the Yahoo data breach, occurred in 2013. The company initially reported about one billion exposed data records, but after an investigation, the company updated the number, revealing that three billion accounts were affected. The National Public Data Breach was announced in August 2024. The incident became public when personally identifiable information of individuals became available for sale on the dark web. Overall, the security professionals estimate the leakage of nearly three billion personal records. The next significant data leakage was the March 2018 security breach of India's national ID database, Aadhaar, with over 1.1 billion records exposed. This included biometric information such as identification numbers and fingerprint scans, which could be used to open bank accounts and receive financial aid, among other government services.
Cybercrime - the dark side of digitalization As the world continues its journey into the digital age, corporations and governments across the globe have been increasing their reliance on technology to collect, analyze and store personal data. This, in turn, has led to a rise in the number of cyber crimes, ranging from minor breaches to global-scale attacks impacting billions of users – such as in the case of Yahoo. Within the U.S. alone, 1802 cases of data compromise were reported in 2022. This was a marked increase from the 447 cases reported a decade prior. The high price of data protection As of 2022, the average cost of a single data breach across all industries worldwide stood at around 4.35 million U.S. dollars. This was found to be most costly in the healthcare sector, with each leak reported to have cost the affected party a hefty 10.1 million U.S. dollars. The financial segment followed closely behind. Here, each breach resulted in a loss of approximately 6 million U.S. dollars - 1.5 million more than the global average.
In 2024, the average cost of a data breach in Italy was 4.73 million U.S. dollars, up from 3.86 million U.S. dollars in the previous year. The global average cost per data breach was 4.88 million U.S. dollars as of 2024, up from 4.45 million U.S. dollars recorded as of 2023.
In 2023, 9,537 cases of personal data security breaches were reported to the data protection authority in Denmark. This figure represents an 8.2 percent increase from the previous year. In 2019, the authority received 7,242 such cases.
There are various factors that can mitigate or amplify the cost of a data breach. According to 2020 industry data, the formation of an incidence response team could reduce the average total cost of a data breach by almost ******* U.S. dollars. The same went for incident response testing, which was also a strongly mitigating factor when calculating data breach damages. In 2019, the average total cost of a data breach amounted to **** million U.S. dollars.
Between 2008 and 2024, the most significant data breach in the financial industry worldwide was detected in 2019 in the United States at the First American Financial Corporation. This data breach caused the leakage of *** million financial and personal records. The financial industry is one of the most targeted sectors by cyberattacks that lead to data breaches. However, cyber-attacks are not the only reason for a data breach. Sometimes data compromise occurs due to other reasons, such as system errors.
Open Government Licence - Canada 2.0https://open.canada.ca/en/open-government-licence-canada
License information was derived automatically
This dataset provides an overview of the courses offered by the Canadian Centre for Cyber Security, the duration, course fee, number of sessions offered, and total number of participants for the given fiscal year.
Air passenger satisfaction with security screening in 2019 can be broadly summarised with:
at surveyed airports.
The aspects of security screening with which passengers were least satisfied were:
Over three quarters of passengers (79%) said there was no aspect with which they were least satisfied. Over 90% of passengers agreed that any inconvenience caused by the security screening was acceptable. The average time passengers said they spent queuing for security screening was similar to the previous year – 8.7 minutes. In 2019, average perceived queuing time ranged from 5.0 minutes at Gatwick to 12.7 minutes at Manchester.
Aviation and international statistics
Email mailto:aviation.stats@dft.gov.uk">aviation.stats@dft.gov.uk
Media enquiries 0300 7777 878
This statistic gives information on the most-targeted victim regions of malicious data breaches in 2019, ranked by share of total global cyber attacks. During the data collection period, it was found that ** percent of cyber attack incidents occurred in North America.
From 1 December 2010, the collection of monthly mixed sex accommodation (MSA) breaches was introduced. NHS organisations submit data on the number of occurrences of unjustified mixing in relation to sleeping accommodation. The collection will enable the analysis and publication of consistently defined data to allow patients and members of the public to understand the extent to which MSA is occurring at individual organisations.
Official statistics are produced impartially and free from any political influence.
In 2023, the largest provider of cybersecurity insurance in the United States was Chubb Ltd. The Swiss property and casualty insurer wrote a total of ***** million U.S. dollars in cybersecurity premiums in 2023. Cybersecurity insurance Cybersecurity insurance protects policyholders against risks associated with IT infrastructure and activities. The main causes of IT risks are physical loss or damage (for example from natural disasters), misuse by employees, and unauthorized access by third parties (generally through the internet). Each of these problems can generate costs from business interruption, replacement of IT infrastructure, and/or payment of compensation to victims. Computer crimes such as hacking, malware and viruses were the greatest source of cyber-security losses in the United States from 2013 to 2019, accounting for *********** of all claims made. The global cyber security insurance market This market emerged recently and its development is a consequence of increasing reliance on digital solutions for data storage. It is predicted that the global cyber insurance market will exceed ** billion U.S. dollars by 2025. The cost of a data breach varies by industry. For instance, a data breach in the healthcare sector cost ***** as much as a data breach in the technology sector in 2023.
As of 2024, the average cost of a data breach in France was 4.17 U.S. dollars, up from 4.08 million U.S. dollars in the previous year. The global average cost per data breach was 4.88 million U.S. dollars as of 2024, up from 4.45 million U.S. dollars recorded as of 2023.
Open Government Licence - Canada 2.0https://open.canada.ca/en/open-government-licence-canada
License information was derived automatically
This dataset provides an overview of the courses offered by the Canadian Centre for Cyber Security, the duration, course fee, number of sessions offered, and total number of participants for the given fiscal year.
In 2019, the sector with the highest cost per stolen record in data breaches was healthcare, which had a cost of 429 U.S. dollars per stolen record due to a data breach. The public sector had the lowest cost per stolen record, with a reported amount of only 78 U.S. dollars per record.
The statistic shows the number of data breaches in the United States from 2013 to 2019, by industry. In the last measured period, the majority of the 1,473 annual data breaches affected business and medical or healthcare organizations, with 644 and 525 data breaches respectively.