FBI Logs Record 1,008,597 Cybercrime Complaints and $20.9 Billion in Losses for 2025
The FBI's IC3 Internet Crime Report for 2025 revealed a staggering 1,008,597 reports of cybercrime, resulting in losses totaling $20.9 billion, both unprecedented figures. Phishing and spoofing accounted for 19% of these complaints. According to IBM's 2026 Cost of a Data Breach report, the average cost of a breach rose by 12% to $4.99 million, with U.S. breaches averaging $11.5 million. Verizon's 2026 Data Breach Investigations Report indicated that vulnerability exploitation was responsible for 31% of breaches, outpacing stolen credentials at 13%. Ransomware was involved in 48% of breaches, with median ransom payments decreasing to $769,000. Cybersecurity Ventures projected global cybercrime costs to reach $10.5 trillion in 2025. WordPress reported 11,334 vulnerabilities, primarily in plugins, with a median patch time of 43 days.
Key facts
- FBI IC3 logged 1,008,597 cybercrime complaints and $20.9 billion in reported losses in 2025, both records
- Average data breach cost reached $4.99 million, up 12%, per IBM's 2026 report
- Vulnerability exploitation caused 31% of breaches, surpassing stolen credentials at 13% (Verizon DBIR 2026)
- Median ransom payment dropped to $769,000 from $1 million a year earlier (Sophos 2026)
- Phishing was the most common initial attack vector in IBM's breach study for the fourth straight year
- WordPress recorded 11,334 vulnerabilities in 2025, 91% in plugins (Patchstack)
- Only 26% of CISA known-exploited vulnerabilities were fully remediated, with median patch time of 43 days
- Gartner forecast $213 billion in global information security spending for 2025
Entities
Artists
- Rok
Institutions
- FBI
- FBI Internet Crime Complaint Center
- IBM
- Verizon
- Sophos
- Cybersecurity Ventures
- Patchstack
- Gartner
- CISA
- University of Maryland
- ULTIDA
- WordPress
- Colorlib
Locations
- United States