Breach costs by region

What a data breach costs, region by region, from the published IBM/Ponemon studies. Pick one year or several; every figure links to its source.

Global average cost per breach, 2026–2014 (USD millions)

Average cost per data breach by industry (USD millions)

Healthcare: 2026 6.64, 2025 7.42Healthcare6.64 / 7.42Financial: 2026 6.29, 2025 5.56Financial6.29 / 5.56Industrial: 2026 5.50, 2025 5.00Industrial5.50 / 5.00Technology: 2026 5.50, 2025 4.79Technology5.50 / 4.79Entertainment: 2026 5.38, 2025 4.43Entertainment5.38 / 4.43Pharmaceuticals: 2026 5.25, 2025 4.61Pharmaceuticals5.25 / 4.61Energy: 2026 5.24, 2025 4.83Energy5.24 / 4.83Services: 2026 5.08, 2025 4.56Services5.08 / 4.56Communications: 2026 4.71, 2025 3.75Communications4.71 / 3.75Transportation: 2026 4.50, 2025 3.98Transportation4.50 / 3.98Media: 2026 4.49, 2025 4.22Media4.49 / 4.22Hospitality: 2026 4.33, 2025 4.03Hospitality4.33 / 4.03Consumer: 2026 4.31, 2025 3.72Consumer4.31 / 3.72Education: 2026 4.15, 2025 3.80Education4.15 / 3.80Research: 2026 3.99, 2025 3.79Research3.99 / 3.79Retail: 2026 3.80, 2025 3.54Retail3.80 / 3.54Public: 2026 3.50, 2025 2.86Public3.50 / 2.86

2026 2025

About this data

IBM/Ponemon, Cost of a Data Breach Report 2026, Figure 4. Earlier reports show industry costs only as chart images, so only 2026 and 2025 are listed. Source: IBM Cost of a Data Breach Report 2026.

Victims per group (number of organisations, not money)

Victims stated by officials (as-of dates differ)

Cl0p: 8000+ (TA505, all campaigns) (as of 2023-06)Cl0p8000+ (TA505, all campaigns)as of 2023-06LockBit: 2000+ (as of 2024-02)LockBit2000+as of 2024-02Hive: 1300+ (as of 2022-11)Hive1300+as of 2022-11Conti: 1000+ (as of 2022-01)Conti1000+as of 2022-01Play: ~900 (as of 2025-05)Play~900as of 2025-05SafePay: 600+ (as of 2026-10)SafePay600+as of 2026-10Black Basta: 500+ (as of 2024-05)Black Basta500+as of 2024-05Medusa: 500+ (as of 2026-04)Medusa500+as of 2026-04RansomHub: 210+ (as of 2024-08)RansomHub210+as of 2024-08Cuba: 101 (as of 2022-08)Cuba101as of 2022-08
About this data

Each bar is one official statement; bar length uses its leading number only. Quotes and sources are on the Threat groups page.

About this data and sources

The average cost of one breach across the organisations IBM/Ponemon studied that year. A single global average was first published with the 2014 study; earlier studies were country by country.

Sources

Average cost of a data breach by region and report year (CyphrQ average of IBM market figures)
YearNorth AmericaLatin AmericaEuropeMiddle East & North AfricaAsiaAustralia & New ZealandSub-Saharan Africa
2026USD 8.35M ▲ above global averageUSD 3.03M ▼ below global averageUSD 4.93M ▼ below global averageUSD 8.00M ▲ above global averageUSD 3.64M ▼ below global averageUSD 2.96M ▼ below global averageUSD 3.04M ▼ below global average
2025USD 7.53M ▲ above global averageUSD 2.52M ▼ below global averageUSD 4.32M ▼ below global averageUSD 7.29M ▲ above global averageUSD 3.28M ▼ below global averageUSD 2.55M ▼ below global averageUSD 2.37M ▼ below global average
2024USD 7.01M ▲ above global averageUSD 2.76M ▼ below global averageUSD 4.93M ▲ above global averageUSD 8.75M ▲ above global averageUSD 3.26M ▼ below global averageUSD 2.78M ▼ below global averageUSD 2.78M ▼ below global average
2023USD 7.30M ▲ above global averageUSD 2.46M ▼ below global averageUSD 4.21M ▼ below global averageUSD 8.07M ▲ above global averageUSD 3.25M ▼ below global averageUSD 2.70M ▼ below global averageUSD 2.79M ▼ below global average
2022USD 7.54M ▲ above global averageUSD 2.09M ▼ below global averageUSD 4.01M ▼ below global averageUSD 7.46M ▲ above global averageUSD 3.25M ▼ below global averageUSD 2.92M ▼ below global averageUSD 3.36M ▼ below global average
2021USD 7.23M ▲ above global averageUSD 1.82M ▼ below global averageUSD 4.08M ▼ below global averageUSD 6.93M ▲ above global averageUSD 3.20M ▼ below global averageUSD 2.82M ▼ below global averageUSD 3.21M ▼ below global average
2020USD 6.57M ▲ above global averageUSD 1.40M ▼ below global averageUSD 4.17M ▲ above global averageUSD 6.52M ▲ above global averageUSD 2.97M ▼ below global averageUSD 2.15M ▼ below global averageUSD 2.14M ▼ below global average
2019USD 6.31M ▲ above global averageUSD 1.35M ▼ below global averageUSD 4.33M ▲ above global averageUSD 5.97M ▲ above global averageUSD 2.73M ▼ below global averageUSD 2.13M ▼ below global averageUSD 3.06M ▼ below global average
2018USD 6.33M ▲ above global averageUSD 1.24M ▼ below global averageUSD 4.17M ▲ above global averageUSD 5.31M ▲ above global averageUSD 2.56M ▼ below global averageUSD 1.99M ▼ below global averageUSD 2.90M ▼ below global average
2017USD 5.83M ▲ above global averageUSD 1.52M ▼ below global averageNot in reportUSD 4.94M ▲ above global averageNot in reportNot in reportNot in report
2016USD 7.01M ▲ above global averageNot in reportNot in reportNot in reportNot in reportNot in reportNot in report
2015USD 5.46M ▲ above global averageUSD 1.77M ▼ below global averageUSD 4.30M ▲ above global averageUSD 3.80M ▲ above global averageUSD 2.07M ▼ below global averageUSD 2.61M ▼ below global averageNot in report
2014USD 5.85M ▲ above global averageUSD 1.61M ▼ below global averageUSD 4.21M ▲ above global averageUSD 3.12M ▼ below global averageUSD 1.86M ▼ below global averageUSD 2.59M ▼ below global averageNot in report
2013USD 5.40MUSD 1.32MUSD 3.98MNot in reportUSD 1.70MUSD 4.10MNot in report
2012USD 5.50MNot in reportNot in reportNot in reportNot in reportNot in reportNot in report
2011USD 7.24MNot in reportNot in reportNot in reportNot in reportNot in reportNot in report
2010USD 6.75MNot in reportNot in reportNot in reportNot in reportNot in reportNot in report
2009USD 6.66MNot in reportNot in reportNot in reportNot in reportNot in reportNot in report
2008USD 6.36MNot in reportNot in reportNot in reportNot in reportNot in reportNot in report
2007USD 4.79MNot in reportNot in reportNot in reportNot in reportNot in reportNot in report
2006USD 3.54MNot in reportNot in reportNot in reportNot in reportNot in reportNot in report

Average total cost of a data breach as published in IBM/Ponemon "Cost of a Data Breach" reports, by report year, in US dollars. Early studies published only in local currency are left out, not converted. Regional figures are CyphrQ’s own unweighted average of the markets each year’s study reports for that region (North America: United States, Canada; Latin America: Latin America, Brazil; Europe: United Kingdom, Germany, Benelux, France, Italy, Scandinavia; Middle East & North Africa: Middle East; Asia: Japan, India, ASEAN; Australia & New Zealand: Australia; Sub-Saharan Africa: South Africa); IBM does not publish these regional averages, and a region with one market is that market alone. Hover a figure to see which markets it uses. Years with no published figure are left out (the series starts in 2006); "Not in report" means that year’s study did not cover the region, not that it had no breaches. Averages are not added up across years: selecting several years on the map shows their average. Map colours run from yellow (lower cost) to dark red (higher cost), relative to the regions shown. ▲ / ▼: above or below that year’s global average cost per breach.

Sources