Cyber IT Supervisory Forum eBook

Internal Use Only

Scary Numbers, Part 1: Scope and Scale

10% of organizations worldwide have been

$5M Average cost of

$567M in 2022 $1.1B in 2023 Amount paid out (that we know of)

ransomware attack including detection, notification, response and lost business

affected in 2023 33% increase from previous year

13

© 2024 THE MITRE CORPORATION. ALL RIGHTS RESERVED. APPROVED FOR PUBLIC RELEASE. DISTRIBUTION UNLIMITED 23-01698-01.

Internal Use Only

Scary Numbers, Part 2: Financial Sector Impacts

Financial Sector is an attractive target [8] [9]

34% of attacks in 2021

55% of attacks in 2022

64% of attacks in 2023

While small and medium biz are primary targets, big players aren’t exempt  CNA Financial attack resulted in data exfil (75K customers affected)  Company shut down for three days

14

© 2024 THE MITRE CORPORATION. ALL RIGHTS RESERVED. APPROVED FOR PUBLIC RELEASE. DISTRIBUTION UNLIMITED 23-01698-01.