The Most Telling Cyber Security Statistics in 2022 [Infographic]

Nick G.
Nick G.

Updated · Apr 22, 2022


Techjury is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more.

Cybersecurity is often seen as one of those big problems that only large entities like banks, tech companies, and governments have to worry about. In reality, a lot more people should be concerned with cybersecurity and not just the big corporations. The latter may be indeed responsible for more data. Still, it is the smaller entities, such as companies with less than 1000 employees, that are at the greatest risk.

TechJury compiled a list of cyber security statistics to help visualize what is happening in the field as well as what to expect in 2022.

Alarming Cyber Security Statistics

Here are some alarming cyber security facts:

  • It takes half a year to detect a data breach.
  • 43% of all cyber attacks are aimed at small businesses.
  • 91% of attacks launch with a phishing email.
  • A business falls victim to a ransomware attack every 14 seconds.
  • 38% of malicious attachments are masked as one Microsoft Office type of file or another.
  • Companies faced an average of 22 security breaches in 2020.
  • The global cost of online crime is expected to reach $6 trillion by 2021.

Okay, let’s begin with the latest cyber security stats and facts.

Cyber security statistics for 2022

In addition to dealing with the COVID-19 situation, companies have to protect themselves from cyber crimes as well. Here’s what the numbers reveal:

1. 99% of attack vectors in 2020 were known to cybersecurity professionals.

(Source: Entrepreneurship in a box) 

Cybersecurity stats for 2020 revealed that only 1% of exploits will happen via new methods. That said, companies should try to improve their cyber security by fixing the known vulnerabilities. 

Still, many continue to fall victim to phishing attacks. That’s why we wrote a practical guide on how to spot a phishing email. Go check it out - it will save you a ton of trouble.

2. Over 20% of attacks on enterprises was predicted to involve IoT by the end of 2020.

(Source: Entrepreneurship in a box) 

This is one of the cyber attack trends businesses should watch out for. With more and more IoT devices (which aren’t famous with their security) cybercriminals have an easy gateway to companies’ networks. 

3. On average, the cost of a data breach surpassed $150 million in 2020. 

(Source: Cybint Solutions)

Considering the colossal cost of these cyber attacks, companies should do their best to improve their security. Still, human error is a major factor considering how many data breaches happen because of misconfigured databases. 

4. Security as a service will represent at least 50% of the security software delivery. 

(Source: Gartner)

Cybersecurity budget statistics reveal that these services are set to surpass the spending on on-premise and hybrid solutions. 

5. 69% of businesses find the cost of staying ahead of cyber criminals unsustainable. 

(Source: Accenture)

Staying ahead of attackers is no cheap task. More than two-thirds of companies face financial difficulties while fighting the constant battle against cyber crime. However, considering the ingenuity of hackers, insider threats, and human errors, this trend is likely to continue. 

6. Companies faced an average of 22 security breaches in 2020.

(Source Accenture)

The bad news is, that if you are running a business more than likely you’ll face 22 breaches by the end of the year. 

The good news is, this number is down compared to 2019 (30). 

All in all the cyberattacks dropped by 11%, which is a good indicator of how companies are handling their cybersecurity. 

7. According to cyber security statistics 75% of users expected the number of attacks targeting money or data to grow in 2020.

(Source: Weforum)

Considering that data equals money in the modern world, it’s safe to say cybercriminals’ end goal is cash. However, one-fourth of consumers have a different opinion - that the number of these attacks will go down. Considering the previous stat, they might prove right. 

8. By April 2020 there were already more than 38 million new malware.

(Source: Comparitech)

Thread actors are creating malware like crazy. 

Cyber security stats reveal that there were almost 145 million new malware samples in 2019.

It’s almost like there’s a malware machine gun somewhere that’s constantly firing. And it’s trying to hit as many targets as possible. 

9. 86% of UK businesses experienced a phishing attack in 2020.

(Source: Cyber Security Breaches Survey)

This is a rise from 2019 when “only” 72% of UK companies experienced such an attack. On the bright side, there’s a drop in malware attacks - only 16% of businesses were affected, compared to 33% in 2019. 

10. The number of passwords worldwide will grow to 300 billion.

(Source: Yahoo! Finance)

That’s a huge number! 

If every person on Earth used passwords, each of us would have about 38. Ain’t that crazy? I can’t remember more than one, let alone 38. Thankfully, there are these cute little apps called password managers that can handle this problem. 


If these cyber security statistics for 2022 weren’t enough for you, rest assured there’s many more below. 

Data Breaches Statistics

Often it is data breaches that steal the headlines.

11. In most cases, it takes companies about 6 months to detect a data breach.

(Source: ZD Net)

If a robbery took place and the perpetrators got away, how much of a head start do they have to cover their tracks? A day? An hour? Cyber criminals often get a neat 6-month head start, which makes tracking them down that much harder.

12. There were 8,854 recorded breaches between January 1, 2005 and April 18, 2018. In the first half of 2019 alone, the number stood at 3,800.

(Source: Identity Theft Resource Center, Forbes)

It seems that identity theft does pay. These breaches account for millions of records, with the price per record ranging anywhere from $120-$600.

If we average these out at $360 per record, then the total price of these breaches is in the billions. People talk about the cost of cyber security, but they seldom think about the cost of not having it.

13. In 2017, 61% of data breach victims were companies with less than 1000 employees.

(Source: Verizon)

While this number may be alarming, this has more to do with the fact that the larger-scale companies are more likely to have robust security than smaller companies. Many of these smaller companies simply do not have the means for a proper defense to combat advanced cyber threats, which contributes heavily to these cyber security statistics.

Big companies, on the other hand, are more likely to take substantial losses from massive data breaches.

Cyber attacks vary in sort and severity, but they can be absolutely devastating, especially for small business owners.

14. 43% of cyber attacks are targeted at small businesses.

(Source: Small Business Trends)

It makes a lot of sense that the little guy is targeted so often. While the benefit of such an attack for the hacker is relatively small, it is much easier to pull it off. Many small businesses have minimal security infrastructure, making them easy prey for data predators. Considering the number of cyber attacks per day, quite a few of those get targeted.

15. Around 50% of the risk companies face come by way of having multiple security vendors.

(Source: Cisco)

One may think when it comes to security, the more the merrier. However, having multiple security vendors is a great way to complicate your security infrastructure in a way that is likely to create greater vulnerabilities. It is best to stick with one security vendor and comply with all security updates and recommendations the vendor presents, according to various hacking stats.

16. IoT attacks were up by 600% in 2017. In 2019, the attacks reached 2.9 billion events. 

(Source: Symantec, Forbes)

The number of IoT devices has skyrocketed, making hackers and cybercriminals have a greater choice of targets for attack. A portion of the rise could be attributed to the increased number of IoT devices, but the greater issue is that security doesn’t keep up with the pace of the growing threats.

17. 31% of organizations have experienced cyber attacks on operational infrastructure.

(Source: Cisco)

Perhaps the more concerning side to cyber security statistics, in general, is the number of incidents that have gone unreported. Speculation would lead one to believe that the figure of 31% is significantly lower than reality. Whatever the case, this is an important figure to be aware of as it shows that hackers are proficient in finding the correct target.

(Source: Cox BLUE)

Another prevalent form of attack comes in the form of DDoS. This attack attempts to disrupt regular traffic to the desired web endpoint. Video gaming is a popular place for these attacks to occur because there are predictable and specific endpoints for most devices.

19. Just 38% of global organizations claim that they are equipped and able to handle a complex cyber attack.

(Source: IBM)

Perhaps one of the most alarming cyber security statistics on this list is that 62% of global organizations cannot claim that they are equipped to handle a cyber attack. This void will lead the charge for improved cybersecurity in the future.

Cyber Security Stats - Infographic

The following infographic pretty sums up everything.

Cyber Security Statistics - Infographic

Malware Statistics

Malware is by far the most common type of malicious internet activity. One of the most common ways to protect your devices from malware is by using antivirus software.

20. The app stores block over 24,000 malicious mobile apps each day.

(Source: Symantec)

Apple has generally been on top of its app store, not allowing malicious or harmful software onto iOS devices. Android has had a longer journey there because of the freedom afforded to developers. Nevertheless, it improved radically over the past several years. Such malicious apps can still be accessed, but most devices do require user approval before installing any unverified third-party applications. Cyber attack statistics show this to be a key reason why harmful software for mobile devices is not such an issue anymore.

21. $2.4 million was the average cost of a malware attack in 2017. That's quite high, considering the average cost of a cyberattack was $1.7 million in 2019.

(Source: Accenture, Sucuri)

One of the most prevalent attacks comes in the form of malware. Malware can cripple entire systems or even render them useless. A successful malware attack resulting in a cybersecurity breach can crumble an entire company as well as ruin its public reputation.

22. There was an 80% increase in malware attacks on Mac computers in 2017.

(Source: Cisco)

Mac computers have always been renowned for their threat security. As far as out of the box security goes, Mac has been the gold standard for quite some time. But things seem to be changing. Malware statistics point to an astronomical increase that raises a few eyebrows. Is it possible that cybercriminals have found new vulnerabilities?

23. 75% of the healthcare industry has been infected with malware at some point in time.

(Source: CISION: PR Newswire)

The healthcare industry accounts for the most records lost. This has to do with many factors including outdated systems, lack of cybersecurity training, and substandard protocols. In short, healthcare providers are an easy target with a lot to offer to potential criminals. It is no wonder why this industry is so often a target of large scale cyber attacks.

24. Around 60% of malicious web domains are associated with spam campaigns.

(Source: Cisco)

For some reason I find it concerning when a company tells me to check my spam folder. The spam folder is where many people get taken advantage of. Spam campaigns attempt to send the user to insecure or malicious domains in an attempt to mine data.

25. 38% of malicious files came in formats used by the Microsoft Office suite of products.

(Source: Cisco)

Microsoft Office is one of the most familiar sights in a modern working environment. Cybercriminals use these formats for their malicious files in attempts to lure unsuspecting victims into thinking it is just a simple spreadsheet or report. This is valid not only for recent cyber attacks, as executable files masked as harmless. Well-known files have been a popular digital bait for years now.

Cyber Security Jobs Market Statistics

Security specialist is one of the most promising career choices in the IT sector.

26. There are over 300,000 unfilled cybersecurity jobs in the United States, with the demand rising each year.

(Source: Cybint Solutions)

If you are a college freshman deciding on a major, then cybersecurity might be an attractive option. Not only are there plenty of openings, but the demand is expected to rise at an unprecedented rate. There are plenty of jobs available in tech nowadays, but perhaps none are as vital as security. The next few cyber security stats show just how pressing this need may be.

27. By 2021, the number of unfilled cybersecurity jobs is expected to balloon to 3.5 million.

(Source: The Hill)

The expected rise in jobs is still outpaced by the expected need for them. Chances are, companies will not be able to get enough cybersecurity experts. Let’s just stop and consider what it means that so many companies will not be able to get proper protection from cybercrimes. As cybercrime statistics show, this is one of the biggest problems that companies have to solve.

28. Cybersecurity job postings are up 74% over the past five years.

(Source: Cybint Solutions)

This is the silver lining. Many young people will be able to find gainful work in the cyber security sector. The unfortunate reality is much of this will be in response to attacks that will take place, and that there will be many more data breaches affecting millions of people within the next few years. Data breach statistics don’t suggest that the need for experts in the field will be lessened any time soon.

29. Cybersecurity expenditures are expected to rise above $1 trillion by 2025.

(Source: Cybersecurity Ventures)

Once again, just like the jobs figures, this points to a very secure future for those pursuing a career in cybersecurity. The question remains if these expected expenditures will be enough to prevent data breaches or at least bring them down significantly.

30. The annual cost of cybercrime damages is expected to hit $6 trillion by 2021.

(Source: CyberSecurity Ventures)

The rate of these crimes is only expected to increase. Criminals are finding increasingly clever and diabolical ways to get their hands on data. This, coupled with the projections for further data breaches, spells an unwelcome story going forward. Some estimates have the number as high as $10 trillion. In this context, whatever the cost of cybersecurity may be it seems like a worthy investment.

31. 65% of companies have over 500 employees that have never changed their password.

(Source: Varonis)

I believe most people are guilty of not changing their password often enough. This is just making it easy for would-be cybercriminals to have easy access to sensitive information through compromised passwords.

An easy solution to these problems is an automated system that requires employees to regularly change passwords. Many such programs are free and easily implemented by IT professionals.

Changing passwords is not enough though. Employees should know how to pick a strong password as well.

Ransomware Statistics

Ransomware, especially with the advent of cryptocurrencies, is an increasingly popular way for hackers to make money.

32. Ransomware attacks are growing more than 350% annually.

(Source: Cisco)

A ransomware attack is designed to hijack the targets’ systems and hold them hostage in exchange for certain demands. These attacks are particularly effective and growing in number as the data from Cisco shows. The increase in cyber attacks is bound to continue in the foreseeable future.

33. The damage costs of ransomware were predicted to rise to $11.5 billion in 2019.

(Source: Cybersecurity Ventures)

Once again, ransomware holds data and entire systems hostage until demands are met. Independent risk evaluators postulate that compliance with the perpetrator leads to greater security vulnerabilities and greater total loss.

34. A business falls victim to a ransomware attack every 14 seconds.

(Source: Cybersecurity Ventures)

Something that differentiates cybercrime from any other kind of crime is the automation that can be deployed by perpetrators. Automation allows for cyber attacks to be deployed simultaneously and relentlessly. The number of cyber attacks each day keeps going up. Automation may also be the key to protection, but is not yet clear how to utilize this technology. As the stakes get higher and cyber criminals become more aggressive, the incentive to develop a solution will rise as well.

Important Cyber Security Facts

System upgrades are not the easiest thing to implement. However, they become increasingly necessary to address adequately the growing security threats.

35. 21% of all files are completely unprotected.

(Source: Varonis)

This isn’t as startling of a revelation when compared to the other cyber security stats, but it is an alarming number nonetheless. Of course, just because a file isn’t protected, doesn’t mean it’s accessible.

36. Reported system vulnerabilities went up by 12% in 2018, compared to the previous year.

(Source: Skybox)

The full reports for 2020 have not become available at the time of this writing, but early indications have this figure even higher over the past year. As tech evolves, most do not upgrade immediately. Older systems have different security vulnerabilities.

37. Human error is responsible for 95% of data breaches.

(Source: Cybint Solutions)

With a large data breach, all eyes and fingers begin pointing to the IT department. The fact of the matter is that the IT department isn't usually the one to blaim for these data breaches. Information technology security breaches are few and far between. User error or actions that fall outside of IT recommended behavior will always cause more problems than just following the guidelines set by the IT department.

Phishing Statistics

Phishing mail, just like the popular hobby with similar name, is extremely common and simple.

38. 30% of U.S. users open phishing emails.

(Source: Verizon)

A tremendous amount of emails is sent every day around the globe. A big part of it is phishing emails.

Unsurprisingly, phishing attacks make up a large amount of cyber security incidents. Statistics show that people aged 35-44 are the most likely victims of cybercrime, but it is quite likely that most of us have opened phishing emails at some point in time.

Kaspersky’s anti-phishing software has caught hundreds of millions of them every year.

(Source: Verizon)

As we await the arrival of next year's cyber security statistics, the report from Verizon shows that phishing attacks had a moderately high success rate. With more and more people understanding the dangers that lurk with these attacks, the hope is that this number will continue to fall in the coming years.

40. In 2017, 76% of businesses reported that they had been a victim of a phishing attack.

(Source: Wombat)

Phishing attacks are the most common cyber security attack. These types of attacks are a big part of why there are so many compromised passwords. If you check your spam folder in your email, it is more than likely that you will find several of them. If a phishing email makes it past filters into the inbox, to the untrained eye they will seem like legitimate messages that are trustworthy.


Cyber security statistics show that this field will only continue to grow commensurately with the demand. Hackers and cyber criminals aren’t slowing down, so take some time to appreciate those keeping the digital side of our lives safe. This expanding industry figures to become more important with each year that comes.


Nick G.

Nick G.

Nick wants to create a board game where web servers are the good characters and the humans lose. He might simply need to wait a few more years to have a neverending LARP experience of such reality.

Leave your comment

Your email address will not be published.