{ "name": "Outsourced IT Quotes Cyber Incident Cost", "title": "Cyber Incident Cost", "url": "https://outsourceditsupportquotes.com/datasets/cyber-incident-cost/", "csv": "https://outsourceditsupportquotes.com/datasets/cyber-incident-cost.csv", "markdown": "https://outsourceditsupportquotes.com/datasets/cyber-incident-cost/index.md", "computed_at": "2026-10-19", "license": "https://outsourceditsupportquotes.com/terms", "headline": "The Cyber Incident Cost carries 6 published figures read from 2 sources' own pages; the 3 published figures given by attack type run from 1 to 38 percent, read 12 October 2026.", "quotes": [ "The Cyber Incident Cost carries 6 published figures read from 2 sources' own pages; the 3 published figures given by attack type run from 1 to 38 percent, read 12 October 2026.", "2 of the 7 named sources read in full publish a figure; 5 publish none, read 12 October 2026.", "Cyber Incident Cost, jurisdiction GB: median 43 percent across 1 source, read 12 October 2026.", "Cyber Incident Cost, jurisdiction US: median 83 percent across 1 source, read 12 October 2026.", "Cyber Incident Cost, business size medium: median 65 percent across 1 source, read 12 October 2026.", "Cyber Incident Cost, attack type phishing: median 38 percent across 1 source, read 12 October 2026.", "Cyber Incident Cost, attack type ransomware: median 1 percent across 1 source, read 12 October 2026.", "Cyber Incident Cost, attack type impersonation: median 12 percent across 1 source, read 12 October 2026." ], "citation": "\"Outsourced IT Quotes Cyber Incident Cost\", updated 2026-10-19, https://outsourceditsupportquotes.com/datasets/cyber-incident-cost/.", "changed_since": null, "national": { "unit": "%", "n": 6, "median": 40.5, "min": 1, "max": 83, "p25": 9.25, "p75": 69.5, "mean": 40.3333, "units": { "%": 6 }, "published_sources": 2, "named_sources": 8, "read_sources": 7, "not_published": 5, "published_share": 0.286 }, "by_axis": { "jurisdiction": { "GB": { "%": { "n": 1, "median": 43, "min": 43, "max": 43, "p25": 43, "p75": 43, "mean": 43 } }, "US": { "%": { "n": 1, "median": 83, "min": 83, "max": 83, "p25": 83, "p75": 83, "mean": 83 } } }, "business size": { "medium": { "%": { "n": 1, "median": 65, "min": 65, "max": 65, "p25": 65, "p75": 65, "mean": 65 } } }, "attack type": { "phishing": { "%": { "n": 1, "median": 38, "min": 38, "max": 38, "p25": 38, "p75": 38, "mean": 38 } }, "ransomware": { "%": { "n": 1, "median": 1, "min": 1, "max": 1, "p25": 1, "p75": 1, "mean": 1 } }, "impersonation": { "%": { "n": 1, "median": 12, "min": 12, "max": 12, "p25": 12, "p75": 12, "mean": 12 } } } }, "rows": [ { "source": "DSIT Cyber Security Breaches Survey 2025/26", "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026", "figure": "43%", "value": 43, "unit": "%", "vat": null, "axis": { "jurisdiction": "GB" }, "retrieved_at": "2026-10-12", "quote": "Just over four in ten businesses (43%) and around three in ten charities (28%) reported having experienced any kind of cyber security breach or attack in the last 12 months.", "source_class": "primary-government", "text_sha256": "e72a8ce74c6f815f9aa8153a80ea343fb7b1c293322afcc6ee597517db3bdd8a" }, { "source": "DSIT Cyber Security Breaches Survey 2025/26", "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026", "figure": "65%", "value": 65, "unit": "%", "vat": null, "axis": { "business size": "medium" }, "retrieved_at": "2026-10-12", "quote": "Following the pattern observed in previous years, medium (65%) and large (69%) businesses were more likely to have experienced a cyber breach or attack in the last 12 months compared to micro (42%) and small (46%) businesses.", "source_class": "primary-government", "text_sha256": "e72a8ce74c6f815f9aa8153a80ea343fb7b1c293322afcc6ee597517db3bdd8a" }, { "source": "DSIT Cyber Security Breaches Survey 2025/26", "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026", "figure": "38%", "value": 38, "unit": "%", "vat": null, "axis": { "attack type": "phishing" }, "retrieved_at": "2026-10-12", "quote": "Phishing attacks remained the most prevalent type of breach or attack by far (experienced by 38% of businesses and 25% of charities) and continued to be ascribed as the most disruptive type of breach or attack (69% of businesses and charities that experienced a breach or attack).", "source_class": "primary-government", "text_sha256": "e72a8ce74c6f815f9aa8153a80ea343fb7b1c293322afcc6ee597517db3bdd8a" }, { "source": "DSIT Cyber Security Breaches Survey 2025/26", "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026", "figure": "1%", "value": 1, "unit": "%", "vat": null, "axis": { "attack type": "ransomware" }, "retrieved_at": "2026-10-12", "quote": "Ransomware attacks among businesses have declined compared with the previous two years (1% this year down from 3% in both 2024/2025 and 2023/2024) and phishing attacks and impersonation breaches or attacks, whilst not significantly different to last year, have significantly declined compared to two years ago (38% this year down from 42% in 2023/2024).", "source_class": "primary-government", "text_sha256": "e72a8ce74c6f815f9aa8153a80ea343fb7b1c293322afcc6ee597517db3bdd8a" }, { "source": "DSIT Cyber Security Breaches Survey 2025/26", "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026", "figure": "12%", "value": 12, "unit": "%", "vat": null, "axis": { "attack type": "impersonation" }, "retrieved_at": "2026-10-12", "quote": "Impersonation breaches or attacks have decreased to 12% this year, down from 17% in 2023.", "source_class": "primary-government", "text_sha256": "e72a8ce74c6f815f9aa8153a80ea343fb7b1c293322afcc6ee597517db3bdd8a" }, { "source": "IC3 Internet Crime Report 2024 (PDF)", "url": "https://www.ic3.gov/AnnualReport/Reports/2024_IC3Report.pdf", "figure": "83%", "value": 83, "unit": "%", "vat": null, "axis": { "jurisdiction": "US" }, "retrieved_at": "2026-10-12", "quote": "Cyber-enabled fraud is responsible for almost 83% of all losses", "source_class": "primary-government", "text_sha256": "ba494b0a1bd991c722cf65619eb518329175b898fb508e8c84fc7dd12e07cac0" } ], "not_published": [ { "source": "DSIT Cyber Security Breaches Survey: release page", "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026", "retrieved_at": "2026-10-12", "reason": "read in full and no accepted figure on the page" }, { "source": "FBI IC3 Internet Crime Report index", "url": "https://www.ic3.gov/AnnualReport/Reports", "retrieved_at": "2026-10-11", "reason": "read in full and no accepted figure on the page" }, { "source": "ENISA Threat Landscape 2025", "url": "https://www.enisa.europa.eu/publications/enisa-threat-landscape-2025", "retrieved_at": "2026-10-12", "reason": "read in full and no accepted figure on the page" }, { "source": "ENISA threat landscape topic", "url": "https://www.enisa.europa.eu/topics/cyber-threats/threat-landscape", "retrieved_at": "2026-10-12", "reason": "every candidate on the page was refused" }, { "source": "FTC small business cybersecurity", "url": "https://www.ftc.gov/business-guidance/small-businesses/cybersecurity", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" } ], "sources": [ { "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026", "label": "DSIT Cyber Security Breaches Survey 2025/26", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026", "label": "DSIT Cyber Security Breaches Survey: release page", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ic3.gov/AnnualReport/Reports", "label": "FBI IC3 Internet Crime Report index", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.enisa.europa.eu/publications/enisa-threat-landscape-2025", "label": "ENISA Threat Landscape 2025", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.enisa.europa.eu/topics/cyber-threats/threat-landscape", "label": "ENISA threat landscape topic", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ftc.gov/business-guidance/small-businesses/cybersecurity", "label": "FTC small business cybersecurity", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.cisa.gov/news-events/cybersecurity-advisories", "label": "CISA cybersecurity advisories", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ic3.gov/AnnualReport/Reports/2024_IC3Report.pdf", "label": "IC3 Internet Crime Report 2024 (PDF)", "license": "the publisher's own terms; quoted for reporting and comment" } ], "methodology": "Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2). 2 of the 7 named sources that could be read published a usable figure; 5 published none and are recorded as not published, never filled in; 1 could not be read (blocked, dead or unreachable) and count nowhere. The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source for each breakdown it prices, in % (a source's median where its page yielded several accepted sentences for one breakdown), so a page that gives figures for several breakdowns gives one for each and N counts 6 figures, never sentences; 23 candidate sentence(s) were refused by a reviewer with the reason recorded. The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): one series per jurisdiction per year from the official statistics only - incidence, attack type mix and the reported cost distribution (median and quartiles, never a mean, because the tail is what a mean hides) - joined across UK, US and EU releases so the same year reads three ways; against it the annual cost of the managed-security tier from the pricing index, which turns 'is it worth it' into a number rather than an argument.", "embed": "

1 to 38 percent

3 of 6 published figures (attack type), Cyber Incident Cost, across 2 sources, read 12 October 2026

Source: Outsourced IT Quotes Cyber Incident Cost
" }