This statistic depicts the most expensive types of IT security breaches to enterprises and small- or medium-sized businesses according to a survey conducted in 2016. As of the measured period, the average cost of zero day vulnerability incidents to enterprises was over 2 million U.S. dollars. Zero day attacks also ranked first among the most expensive attacks against SMBs with an average cost of 149 thousand U.S. dollars.
Most expensive types of IT security incidents for small-to-medium businesses (SMBs) and enterprises worldwide as of 2016
(in U.S. dollars)
Characteristic
Enterprises
Small-to-medium businesses
Previously unknown, zero day vulnerability
2,048,963
149,131
Exploits/loss through mobile devices
1,746,212
130,405
Actions of politically motivated hacktivists
1,726,977
127,918
DDoS attack
1,629,831
106,235
Crypto-malware/ransomware
1,491,483
98,676
Phishing/social engineering
1,421,610
98,079
Targeted attack
1,415,545
143,247
Malicious actions of internal staff
1,199,678
-
Careless/uninformed employees
864,815
-
Virus/malware/trojans
836,985
-
Vulnerabilities in code developed ourselves
-
115,580
Known, unpatched exploits on off-the-shelf software/hardware
Profit from the additional features of your individual account
Currently, you are using a shared account. To use individual functions (e.g., mark statistics as favourites, set
statistic alerts) please log in with your personal account.
If you are an admin, please authenticate by logging in again.
Learn more about how Statista can support your business.
Kaspersky Lab. (September 13, 2016). Most expensive types of IT security incidents for small-to-medium businesses (SMBs) and enterprises worldwide as of 2016 (in U.S. dollars) [Graph]. In Statista. Retrieved January 30, 2025, from https://www.statista.com/statistics/619338/worldwide-cost-it-security-types-by-company-size/
Kaspersky Lab. "Most expensive types of IT security incidents for small-to-medium businesses (SMBs) and enterprises worldwide as of 2016 (in U.S. dollars)." Chart. September 13, 2016. Statista. Accessed January 30, 2025. https://www.statista.com/statistics/619338/worldwide-cost-it-security-types-by-company-size/
Kaspersky Lab. (2016). Most expensive types of IT security incidents for small-to-medium businesses (SMBs) and enterprises worldwide as of 2016 (in U.S. dollars). Statista. Statista Inc.. Accessed: January 30, 2025. https://www.statista.com/statistics/619338/worldwide-cost-it-security-types-by-company-size/
Kaspersky Lab. "Most Expensive Types of It Security Incidents for Small-to-medium Businesses (Smbs) and Enterprises Worldwide as of 2016 (in U.S. Dollars)." Statista, Statista Inc., 13 Sep 2016, https://www.statista.com/statistics/619338/worldwide-cost-it-security-types-by-company-size/
Kaspersky Lab, Most expensive types of IT security incidents for small-to-medium businesses (SMBs) and enterprises worldwide as of 2016 (in U.S. dollars) Statista, https://www.statista.com/statistics/619338/worldwide-cost-it-security-types-by-company-size/ (last visited January 30, 2025)
Most expensive types of IT security incidents for small-to-medium businesses (SMBs) and enterprises worldwide as of 2016 (in U.S. dollars) [Graph], Kaspersky Lab, September 13, 2016. [Online]. Available: https://www.statista.com/statistics/619338/worldwide-cost-it-security-types-by-company-size/
