Cybercrime now costs the world trillions: losses near $10,000 per attack

A new cybercrime report puts numbers to a problem most people already sense: online scams, ransomware, identity theft, and data breaches are costing businesses and households around the world trillions of dollars each year. It also lands on a simpler point. Basic security steps still lower the risk.

The report says a single incident can now cost close to $10,000 on average once you count stolen funds from bank accounts, credit cards, or crypto wallets, follow-on fraud, recovery costs, account lockouts, and the broader disruption that comes with it. And the risk can start in very ordinary ways: a fake delivery text, a bogus bank alert, a phishing email, a social media message, a locked device, or someone posing as a trusted contact and pushing you into a transfer. For businesses, the fallout can stretch much further, including direct theft, downtime, legal expenses, regulatory scrutiny, customer compensation, reputational damage, system restoration, and breach notifications. Attackers are targeting more people, automating repeat campaigns with stolen data, and running like businesses themselves, with support services, affiliate programs, and phishing kits. Recovery can then take weeks or months, especially if identity documents, tax records, or business credentials have been exposed.

If you bank, shop, or work online, this report deserves a look. So do the basics: strong unique passwords, a password manager, two-factor authentication, software updates, employee training, tested backups, and a healthy dose of skepticism around links, attachments, and urgent payment requests. Small security habits still make a real difference.

The report is available online now.