BUSINESS CYBERSECURITY REFERENCE
A practical, sourced reference on the risks behind online crime, email fraud, software vulnerabilities, ransomware, and mobile threats.
LAST UPDATED SEPTEMBER 14, 2026
These figures are selected for business owners, teams, writers, and partners who need a clear, citable view of the current threat landscape. Each statistic links to its original report and names the period it covers.
They do not predict what will happen to any one business. They help explain why sensible controls around email, updates, access, and recovery deserve regular attention.
859,532
The FBI Internet Crime Complaint Center received this many complaints in 2024. A complaint is not the same as a confirmed breach, but it shows the scale of reported online crime.
SourceFBI IC3 2024 Annual Report, 2024 data, report published April 2025$16.6B
Reported losses connected to the FBI IC3 complaints in 2024 were 33% higher than the prior year.
SourceFBI IC3 2024 Annual Report, 2024 data, report published April 2025$2.77B
Business email compromise, where an attacker impersonates a trusted person or vendor to redirect money or information, accounted for this reported loss total in 2024.
SourceFBI IC3 2024 Annual Report, 2024 data, report published April 202531%
In Verizon’s 2026 report, exploiting a software vulnerability moved ahead of stolen credentials as the leading initial way attackers got into breached organizations.
SourceVerizon 2026 Data Breach Investigations Report, Published May 18, 202648%
Ransomware was involved in nearly half of the breaches reviewed by Verizon, reinforcing why businesses need both prevention and tested recovery.
SourceVerizon 2026 Data Breach Investigations Report, Published May 18, 202640%
Verizon reported that mobile-device threats saw higher click rates, a reminder that security awareness needs to include phones, text messages, and calls as well as email.
SourceVerizon 2026 Data Breach Investigations Report, Published May 18, 2026WHAT THIS MEANS FOR A BUSINESS
These reports point to a familiar pattern: attackers look for the opening that is easiest to use. That can be an unpatched system, a convincing request for payment, a reused password, or a rushed decision on a phone.
For most businesses, the practical response is to know which systems matter most, keep them current, protect access, give people a clear way to question suspicious requests, and test whether important information can be restored.
Explore H3Systems cybersecurity servicesMETHODOLOGY AND SOURCES
This page uses figures reported by the FBI Internet Crime Complaint Center and Verizon’s Data Breach Investigations Report. The FBI figures summarize complaints and reported losses for calendar year 2024. Verizon’s 2026 report covers incidents that occurred from November 1, 2024 through October 31, 2025.
CITE THIS PAGE
H3Systems. “Cybersecurity Statistics for Businesses: 2026.” Updated September 14, 2026. https://h3systems.com/cybersecurity-statistics
START WITH A CLEARER PICTURE
Tell us what is worrying you, what is changing, or what needs to work better. We’ll start with the practical next step.
888-488-7970