Data Breach Statistics and Key Findings- IDstrong

Cost of a Data Breach *

$3.86 Million Average total cost of a data breach
$8.64 Million United States - most expensive country
$7.13 Million Healthcare - most expensive industry
280 Days Average time to identify and contain a breach

Industry Specific Breaches

4% Financial
34% Business
9% Education
10% Government
43% Healthcare

Data Breach Root Cause
Breakdown in Three Categories *

52% Malicious Attack
25% System Glitch
23% Human Error

Malicious Data Breaches Organized
by Threat Actor Type *

53% Financially Motivated
21% Unknown
13% Hacktivist
13% Nation State

Trend in Average Total Cost
of a Data Breach in Eight Industries *

Measured in US Dollar Millions

Healthcare
Financial
Transportation
Hospitality
Energy
Industrial
Retail
Public

Average Total Cost of a Data Breach
by Country or Region *

Measured in US Dollar Millions

United States	$8.46
Middle East	$6.52
Canada	$4.50
Germany	$4.45
Japan	$4.19
France	$4.01
United Kingdom	$3.90
Global Average	$3.86
Italy	$3.19
South Korea	$3.12
ASEAN	$2.71
Scandinavia	$2.51
Australia	$2.15
South Africa	$2.14
India	$2.00
Turkey	$1.77
Latin America	$1.68
Brazil	$1.12

Types of Records Compromised *

Percentage of breaches involving data in each category

80% $150 Customer
PII
32% $147 Intellectual
Property
24% $143 Anonymized
Customer Data
23% $149 Other Corporate
Data
21% $141 Employee
PII
$146 Average Cost
per Record

Average Cost Per Record by Type of a Data Compromised *

Measured in US Dollar

$150 Customer
PII
$147 Intellectual
Property
$143 Anonymized
Customer Data
$149 Other Corporate
Data
$141 Employee
PII
$146 Average Cost
per Record

Potential Impacts of COVID-19 *

The COVID-19 pandemic has had a tremendous impact on the way many organizations do business, with large numbers of people working from home and increased demand for video conferencing, cloud applications and network resources. To undertand this new reality, we added several questions to the research to gather the opinions of study participants on potential impacts of COVID-19 on the cost of a data breach.

Key Findings

54% Share of organizations that require remote work in response to COVID-19
76% Share of participants who said remote work would increase the time to identify and contain a data breach
70% Share of participants who said remote work would increase the cost of a data breach

Key Findings *

280 Days Average time
to detect and contain
a data breach
315 Days Average time to detect
and contain a data breach
caused by a malicious attack
$1.12 Million Average cost saving of containing
a breach in less than 200 days
vs. more than 200 days
$7.13 Million The average cost of a data breach
in the healthcare industry, an increase of 10%
compared to the 2019 study
80% percent Share of breaches that included
records containing customer PII, at an
average cost of $150 per record
$5.52 Million Average total cost of a breach at enterprises of
more than 25,000 employees, compared to $2.64
million for organizations under 500 employees