Cybersecurity Statistics

Cyber threats are evolving every day, and small businesses and healthcare providers are among the top targets. We’ve compiled the latest cybersecurity statistics, trends, and trusted resources to help you understand the real risks—and why proactive protection matters more than ever.

Small Business Cybersecurity Statistics

• 43% of cyberattacks target small businesses. (Verizon DBIR 2024)
• 60% of small businesses that suffer a cyberattack close within six months. (FCC Cybersecurity Planning Guide)
• The average cost of a small business data breach is $120,000. (IBM Data Breach Report 2024)
• Only 14% of small businesses rate their cybersecurity as highly effective. (Cisco SMB Cybersecurity Report)
• Phishing is responsible for 80% of reported security incidents involving small businesses. (CISA Phishing Awareness)

Healthcare and Behavioral Health Cybersecurity Statistics

• Healthcare has been the most targeted industry for cyberattacks four years in a row. (HHS HIPAA Breach Portal)
• Ransomware attacks on healthcare organizations increased 84% year-over-year. (HIPAA Journal 2024)
• 100 million+ healthcare records were exposed in 2024 alone. (HHS Breach Reporting Portal)
• One-third of healthcare breaches originated from third-party vendors. (HHS OCR FY2023 Report)
• Behavioral health providers face unique risks, with therapy notes and mental health records among the most sensitive—and lucrative—targets. (HHS Mental Health Privacy Initiative)

Ransomware and Data Breach Trends

• The average ransomware payment rose to $258,000 in 2024. (Coveware Ransomware Report)
• 70% of ransomware attacks now involve data theft before encryption. (CISA Stop Ransomware Guide)
• 94% of ransomware incidents caused business downtime of 24+ hours. (IBM Data Breach Report 2024)
• Ransomware attacks against healthcare providers increased by 150% in the past two years. (HIPAA Journal 2024)

Trusted Resources for Staying Informed

• CISA Cyber Essentials Toolkits
• FCC Small Business Cyber Planner
• FTC Cybersecurity Guidance for Small Businesses
• HHS HIPAA Breach Reporting Tool (“Wall of Shame”)
• CISA StopRansomware.gov