Live wire
CVE-2026-1142Apache Tomcat — RCE, CVSS 9.8Credentialstuffing wave — 8 retail brands hitISO42001 final draft — AI governance baselineVoltTyphoon successor — energy-sector dwell time 18 daysEUNIS2 expanded scope — mid-market SaaS inRansomwaremean dwell time — 6 days, down from 11Supplychain — npm package compromise — 2.4M downloadsZero-dayin Cisco IOS — patches availableCVE-2026-1142Apache Tomcat — RCE, CVSS 9.8Credentialstuffing wave — 8 retail brands hitISO42001 final draft — AI governance baselineVoltTyphoon successor — energy-sector dwell time 18 daysEUNIS2 expanded scope — mid-market SaaS inRansomwaremean dwell time — 6 days, down from 11Supplychain — npm package compromise — 2.4M downloadsZero-dayin Cisco IOS — patches available
FeedStatsPoliciesComplianceThreat Intel
2025 Breach Intelligence Report

The State of Cybersecurity Breaches

Real-time breach statistics, attack vector analysis, and industry impact data. Know the threats to protect your organization.

Total breaches
3,205
↑ 12% YoY
Records exposed
1.6B
↑ 18% YoY
Avg. cost per breach
$4.88M
↑ 10% YoY
Days to identify
194
• + 64 to contain
I.

Initial access vectors

% of incidents
Phishing
36%
Stolen Credentials
29%
Ransomware
24%
Business Email Compromise
19%
Cloud Misconfiguration
15%
Insider Threat
11%
Supply Chain / Third Party
9%
Zero-Day Exploits
7%
II.

By industry

avg cost · YTD
Healthcare
$10.93M
Financial Services
$6.08M
Technology
$5.45M
Energy / Utilities
$4.78M
Manufacturing
$4.65M
Retail
$3.91M
Education
$3.65M
Government
$3.18M
§ IIITOP THREAT VECTORS — Q ROSTER6 most active
Phishing
1,154 incidents
36%+18% QoQ
Stolen Credentials
929 incidents
29%+18% QoQ
Ransomware
769 incidents
24%+18% QoQ
Business Email Compromise
609 incidents
19%-6% QoQ
Cloud Misconfiguration
481 incidents
15%-6% QoQ
Insider Threat
353 incidents
11%-6% QoQ
§ IVMONTHLY BREACH VOLUME — 2025peak 341
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
NOV
DEC