Cyber Risk Benchmark: data breach cost by industry and country
Average data breach cost by industry and country from IBM's 2025 study, Verizon DBIR benchmarks and public incidents by sector on the Cyber Target radar.
Average cost of a breach by industry (2025)
| Healthcare | US$ 7.42 mi |
| Financial | US$ 5.56 mi |
| Industrial | US$ 5 mi |
| Energy | US$ 4.83 mi |
| Technology | US$ 4.79 mi |
| Pharmaceuticals | US$ 4.61 mi |
| Professional services | US$ 4.56 mi |
| Entertainment | US$ 4.43 mi |
| Media | US$ 4.22 mi |
| Hospitality | US$ 4.03 mi |
| Public sector | US$ 2.86 mi |
IBM Cost of a Data Breach 2025 (via CSO Online; setor público via JD Supra)
- 30% Breaches involving third parties — Verizon DBIR 2025 (via Help Net Security)
- 44% Breaches involving ransomware — Verizon DBIR 2025 (via Help Net Security)
- ~60% Human element in breaches — Verizon DBIR 2025 (via Help Net Security)
- US$ 115 mil Median ransom paid (DBIR) — Verizon DBIR 2025 (via Help Net Security)
- US$ 1 mi Median ransom payment (Sophos) — Sophos State of Ransomware 2025
- US$ 5,08 mi Cost of a ransomware incident — IBM Cost of a Data Breach 2025 (via CSO Online)
- 241 dias Time to identify and contain — IBM Cost of a Data Breach 2025 (via CSO Online)
- 15% Supply chain as root cause — IBM Cost of a Data Breach 2025 (via CSO Online)