Verizon Report Reveals Cyberattack Costs Surge 80% in Five Years Threatening Businesses
A new comprehensive report from Verizon reveals a dramatic 80% increase in the median financial damage caused by cyberattacks over the past five years, far outpacing inflation. Based on analysis of approximately 25,000 insurance claims, the report shows the median loss from a cyber breach now stands at $83,000, with half of affected organizations experiencing even higher costs. In extreme cases, some companies have faced damages exceeding $5 million, highlighting cyberattacks as a significant economic threat beyond just a technological risk.
Between 2019 and 2024, the median damage rose from $60,000 to $110,000, and the top 10% of losses more than doubled to $1.05 million. This increase is 3.5 times the inflation rate in the United States during the same period, emphasizing the rapidly growing financial impact of cyber incidents. The report draws parallels to major attacks like the Jaguar Land Rover breach, which caused $2.5 billion in losses, illustrating how a single cyber event can disrupt entire economies.
The report also highlights the disproportionate vulnerability of small and medium-sized businesses (SMBs). While large enterprises with revenues over $250 million typically lose up to 2% of turnover in extreme cases, SMBs can lose more than 7% of annual revenue from severe attacks. With 39% of claims related to ransomware and 19% to business email compromise (BEC), these targeted attacks pose existential risks to smaller firms, where a $70,000 loss could be devastating.
Retail businesses face particularly high costs, with downtime accounting for 44% of damages and losses 65% above the average. The report underscores the increasing sophistication of cyber threats, including advanced forensic tools and heightened Iranian cyber activity.
Looking ahead, Verizon predicts that if current trends continue, by 2029 the median damage could reach $220,000, with extreme cases causing tens of millions in losses. The report advises CEOs and financial managers to treat cybersecurity as a strategic financial risk, not just an IT expense. Recommended measures include comprehensive cyber insurance, employee training to detect phishing, frequent backups, and prepared incident response plans. In a world where cyber breaches are an economic certainty, proactive preparation is crucial for business survival.
