45% of organizations indicated that the cost of an identity-related breach exceeded the typical cost of a breach as defined by IBM.

24% of organizations reported that the costs of an identity-related breach exceeded $10 million, which is a three-percentage-point increase compared to the previous year.

Organizations faced an average cost of $3.7 million due to successful cyber attacks in the past year, according to the 2025 Security Operations Trends Report.

44% of organizations incurred financial costs, such as a ransom demand or fine, due to security incidents in the past year.

Financial services organizations had an average downtime cost of $1.3 million USD per ransomware incident.

Healthcare organizations reported an average downtime cost of $1.5 million USD per ransomware incident.

Public sector organizations faced the highest average downtime costs at $2.5 million USD per incident.

$1.7 million USD is the average downtime cost per ransomware incident reported by organizations.

For companies with $5 billion or more in revenue, 41% reported a breach costing $1 million or more.

More than a quarter of executives reported that their most damaging data breach in the past three years cost their organisation at least $1 million.

Downtime costs reached up to $500,000 per hour.

The healthcare sector saw a $2.35 million reduction in costs compared to 2024.

The global average cost of a data breach fell to $4.44 million, marking the first decline in five years.

The average U.S. cost of a breach reached a record $10.22 million.

The average cost of an extortion or ransomware incident remains high, particularly when disclosed by an attacker ($5.08 million).

Healthcare breaches remained the most expensive, averaging $7.42 million.

Organisations using AI and automation extensively throughout their security operations saved an average of $1.9 million in breach costs.

37% of financial services organizations are dealing with higher costs passed on by ICT vendors as a consequence of DORA.

The average cost of mobile app security breaches has reached $6.99 million in 2025.

The average cost of recovery from a ransomware attack dropped from $2.73 million in 2024 to $1.53 million in 2025.