---
title: "Cybersecurity Statistics 2026: 100+ Data Points"
description: "100+ cybersecurity stats for 2026, each cited. Average breach cost $4.44M globally, $10.22M in the US; ransomware hit 48% of breaches. Updated monthly."
date: 2026-07-07
lastmod: '2026-07-28'
draft: false
type: research
author_name: "Ranjeeth Kumar"
author_slug: ranjeeth
reviewed_by: "Ranjeeth Kumar"
reviewed_by_slug: ranjeeth
reviewed_by_role: "SaaS Expert, Growth & Marketing Software"
read_time: "14 min read"
cover_image: "/images/research/cybersecurity-statistics-2026-cover.svg"
image: "/images/research/cybersecurity-statistics-2026-cover.png"
image_alt: "Topickz Cybersecurity Statistics 2026 cover, an X-style card from the verified topickz.com research desk titled Cybersecurity Statistics 2026: 100+ Data Points on Breaches, Ransomware and Cost"
schema: "Article"
ai_summary:
- "The average data breach cost $4.44 million globally in 2025, down 9%, but US breaches hit a record $10.22 million, per IBM."
- "Ransomware was present in 48% of all breaches, though attackers were stopped before encryption in 47% of cases, up from 22% in 2023, per Verizon and Sophos."
- "Roughly 62% of breaches involved a human element, and vulnerability exploitation (31%) overtook stolen credentials as the top initial-access vector, per the Verizon 2026 DBIR."
- "13% of organizations confirmed an AI-model breach and 97% of them lacked AI access controls, while shadow AI added $670,000 per breach, per IBM."
- "The FBI's IC3 logged $20.9 billion in reported cybercrime losses in 2025, a 26% jump and the first year past $20 billion."
---
Cybersecurity numbers get quoted more than almost any stat in software, and mangled more than almost any stat too. The figures below are the ones from the actual reports, the Verizon DBIR, IBM's breach study, Sophos, CrowdStrike, the FBI, not the recycled versions that lost their source three blog posts ago.
We collected 100+ cybersecurity statistics for 2026 and cited every single one to its source, with the year it was published. No figure goes on this page unless we could trace it to the study it came from. Where a widely-repeated stat could not be verified (the "60% of small businesses close within six months of an attack" claim, for one), we left it off.
This is a living page. We refresh it as new reports land, so the figures reflect what is current, not what was true a year ago.
{{< infographic-stat
number="$4.44M"
label="average cost of a data breach globally in 2025, down 9%, but US breaches hit a record $10.22 million"
sub="IBM Cost of a Data Breach Report 2025" >}}
{{< collapse "How we compiled this, our sources and method" >}}
**What this page is.** A curated, cited roundup of third-party cybersecurity statistics published in 2025 and 2026. The Topickz research desk collected, checked and organized these figures. We did not run these studies ourselves, and we never present another firm's data as our own.
**Sourcing bar.** Every stat links to a source and carries a year. We prioritized primary sources: the Verizon DBIR, IBM Cost of a Data Breach, Sophos State of Ransomware, CrowdStrike, Mandiant M-Trends, ISC2, the FBI IC3 report and similar. Several of these publishers (IBM, Gartner, some Verizon PDF assets) block automated access, so where that happened we corroborated the figure across multiple independent outlets citing the same named report before including it.
**What we dropped.** Figures we could not trace to a real source were left out, even popular ones. The widely-circulated "60% of small businesses close within six months of a cyberattack" claim traces back to a dead citation and is not on this page. We include only one forecast from Cybersecurity Ventures, clearly labeled, because that firm's projections are contested.
**Disclaimer.** This is general market analysis, not advice on any specific vendor. Topickz may earn affiliate commissions from some tools we cover, and commissions never influence our data or analysis. See our [editorial standards](/about/methodology/) and [affiliate disclosure](/affiliate-disclosure/).
{{< /collapse >}}
## Key takeaways
- **The average breach cost $4.44 million globally**, the first decline in five years, yet US breaches hit a record **$10.22 million**, a split driven by heavier US penalties and litigation. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **Ransomware appeared in 48% of all breaches**, but attackers were stopped before encryption in 47% of cases, up from 22% in 2023, as defenses catch attacks earlier. ([Verizon DBIR](https://www.verizon.com/about/news/2026-data-breach-investigations-report), 2026) ([Sophos](https://www.sophos.com/en-us/blog/the-state-of-ransomware-2025), 2025)
- **Vulnerability exploitation overtook stolen credentials as the #1 way in**, 31% versus 13% of breaches, a notable reversal from the prior year. ([Verizon DBIR](https://www.verizon.com/about/news/2026-data-breach-investigations-report), 2026)
- **Roughly 62% of breaches still involve a human element**, error, manipulation or misuse, even as phishing-simulation performance improves. ([Verizon DBIR](https://www.verizon.com/about/news/2026-data-breach-investigations-report), 2026)
- **AI is now a breach vector as much as a defense tool**: 13% of organizations confirmed an AI-model breach, 97% of them lacked AI access controls, and shadow AI added $670,000 per breach. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **Ransomware is now an SMB risk more than an enterprise one**: it features in 88% of small-business breaches versus 39% for large organizations. ([Verizon DBIR](https://www.verizon.com/business/resources/infographics/2025-dbir-smb-snapshot.pdf), 2025)
- **Attackers move in minutes**: average eCrime breakout time fell to 29 minutes, with a record 27-second breakout observed. ([CrowdStrike](https://www.crowdstrike.com/en-us/global-threat-report/), 2026)
- **Healthcare remains the costliest sector to breach at $7.42 million**, a position it has held for 14 straight years. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **The skills gap shifted from headcount to capability**: 95% of teams report a skills need, and 41% name AI as the most pressing one. ([ISC2](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study), 2025)
- **Cybercrime losses topped $20 billion for the first time**: the FBI's IC3 logged $20.9 billion in reported losses in 2025, up 26% year over year. ([FBI IC3](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf), 2026)
## Breach frequency and cost
- **$4.44 million was the global average cost of a data breach in 2025**, down 9% year over year and the first decline in five years. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **$10.22 million was the average cost of a US data breach**, a record high, up 9% year over year. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **241 days was the average breach lifecycle** (time to identify plus contain), the lowest figure in nine years. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **The 2026 DBIR analyzed more than 22,000 confirmed breaches** out of over 31,000 total security incidents, its largest dataset yet. ([Verizon DBIR](https://www.verizon.com/about/news/2026-data-breach-investigations-report), 2026)
- **48% of breaches involved a third party**, up roughly 60% year over year and now nearly half of all breaches. ([Verizon DBIR](https://www.verizon.com/about/news/2026-data-breach-investigations-report), 2026)
- **3,322 data compromises were tracked in 2025**, a new annual record and up 5% from 2024. ([Identity Theft Resource Center](https://www.idtheftcenter.org/publication/2025-data-breach-report/), 2025)
- **Data compromises rose 79% over five years** in the ITRC compromise database. ([Identity Theft Resource Center](https://www.idtheftcenter.org/publication/2025-data-breach-report/), 2025)
## Ransomware
- **Ransomware was present in 48% of all breaches** in the 2026 dataset, up from 44% the year before. ([Verizon DBIR](https://www.verizon.com/about/news/2026-data-breach-investigations-report), 2026)
- **The median ransom payment fell to $139,875**, down from $150,000 the year before. ([Verizon DBIR](https://www.verizon.com/about/news/2026-data-breach-investigations-report), 2026)
- **69% of victim organizations refused to pay the ransom**, up from 65% the year before. ([Verizon DBIR](https://www.verizon.com/about/news/2026-data-breach-investigations-report), 2026)
- **Attackers were stopped before encryption in 47% of cases**, more than double the 22% stopped in 2023. ([Sophos](https://www.sophos.com/en-us/blog/the-state-of-ransomware-2025), 2025)
- **Only 49% of enterprise ransomware attacks resulted in data encryption**, down sharply from 66% in 2024, the lowest rate in five years. ([Sophos](https://www.sophos.com/en-us/blog/the-state-of-ransomware-2025), 2025)
- **The average recovery cost was $1.53 million** excluding any ransom, down 44% from $2.73 million in 2024. ([Sophos](https://www.sophos.com/en-us/blog/the-state-of-ransomware-2025), 2025)
- **53% of ransomware victims recovered within one week**, up from 35% in 2024. ([Sophos](https://www.sophos.com/en-us/blog/the-state-of-ransomware-2025), 2025)
- **32% of ransomware attacks began with an exploited vulnerability**, the top root cause for the third year running. ([Sophos](https://www.sophos.com/en-us/blog/the-state-of-ransomware-2025), 2025)
- **57% of ransom demands were $1 million or more** in the 2025 survey. ([Sophos](https://www.sophos.com/en-us/blog/the-state-of-ransomware-2025), 2025)
- **Only 25% of ransomware victims with encrypted data paid** in Q4 2024, an all-time low at the time. ([Coveware](https://coveware.com/2025/02/q4-report/), 2025)
- **The average ransom payment was $553,959 in Q4 2024**, up 16% quarter over quarter, while the median fell 45% to $110,890. ([Coveware](https://coveware.com/2025/02/q4-report/), 2025)
## Phishing and social engineering
- **The global baseline Phish-Prone Percentage is 33.2%** before training, so about a third of employees fail a phishing simulation. ([KnowBe4](https://www.knowbe4.com/resources/reports/phishing-by-industry-benchmarking-report), 2026)
- **That figure falls to 4.2% after 12 months of training**, an 87% relative reduction. ([KnowBe4](https://www.knowbe4.com/resources/reports/phishing-by-industry-benchmarking-report), 2026)
- **The highest-risk industries are healthcare and pharma (42.7%), insurance (38.1%) and retail and wholesale (36%)** by phishing susceptibility. ([KnowBe4](https://www.knowbe4.com/resources/reports/phishing-by-industry-benchmarking-report), 2026)
- **Organizations with 10,000+ employees start nearly 15 points more phishing-susceptible** than businesses under 250 people. ([KnowBe4](https://www.knowbe4.com/resources/reports/phishing-by-industry-benchmarking-report), 2026)
- **Voice phishing (vishing) attacks rose 442%** between the first and second half of 2024. ([CrowdStrike](https://www.crowdstrike.com/en-us/resources/reports/global-threat-report-executive-summary-2025/), 2025)
- **Roughly 62% of confirmed breaches involved a human element**: error, manipulation or misuse. ([Verizon DBIR](https://www.verizon.com/about/news/2026-data-breach-investigations-report), 2026)
- **15% of employees routinely access generative AI on corporate devices**, and 72% of those used a personal email account to do so. ([Verizon DBIR](https://www.verizon.com/about/news/2025-data-breach-investigations-report), 2025)
## Attack vectors and credentials
- **Vulnerability exploitation is now the top initial-access vector at 31%**, overtaking stolen credential abuse, which fell to 13% of breaches. ([Verizon DBIR](https://www.verizon.com/about/news/2026-data-breach-investigations-report), 2026)
- **Third-party involvement in breaches jumped to 48%**, up roughly 60% year over year. ([Verizon DBIR](https://www.verizon.com/about/news/2026-data-breach-investigations-report), 2026)
- **Techniques to bypass MFA appeared in 4% of the breach dataset**, including adversary-in-the-middle, token theft and SIM swap. ([Verizon DBIR](https://www.verizon.com/about/news/2025-data-breach-investigations-report), 2025)
- **Exploits were the top initial infection vector in incident-response cases at 32%**, followed by stolen credentials. ([Mandiant M-Trends](https://cloud.google.com/blog/topics/threat-intelligence/m-trends-2026/), 2026)
- **82% of detections were malware-free**, reflecting the shift to valid-account and identity-based intrusion. ([CrowdStrike](https://www.crowdstrike.com/en-us/global-threat-report/), 2026)
- **Access-broker ads selling stolen credentials surged 50% year over year**. ([CrowdStrike](https://www.crowdstrike.com/en-us/resources/reports/global-threat-report-executive-summary-2025/), 2025)
- **CISA's Known Exploited Vulnerabilities catalog grew by 245 entries in 2025**, a roughly 20% jump, with 24 additions tied to active ransomware. ([CISA](https://www.cisa.gov/known-exploited-vulnerabilities-catalog), 2025)
## AI in attacks and defense
- **13% of organizations confirmed a breach of an AI model or application**, with another 8% unsure, and 97% of those breached lacked proper AI access controls. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **60% of AI-related security incidents resulted in compromised data**, and 31% caused operational disruption. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **20% of breaches were attributed to shadow AI**, adding $670,000 to the average breach cost. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **63% of organizations lack a mature AI governance policy** or are still developing one. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **78% of CISOs say AI-powered threats are having a significant impact** on their organization, up 5 points year over year. ([Darktrace](https://www.darktrace.com/the-state-of-ai-cybersecurity-2025), 2025)
- **94% of WEF survey respondents expect AI to be the single biggest driver of cybersecurity change in 2026**. ([World Economic Forum](https://www.weforum.org/publications/global-cybersecurity-outlook-2026/digest/), 2026)
- **Organizations actively assessing the security of their AI tools nearly doubled, from 37% to 64%**. ([World Economic Forum](https://www.weforum.org/publications/global-cybersecurity-outlook-2026/digest/), 2026)
- **China-nexus cyber intrusions increased 38% year over year** across sectors. ([CrowdStrike](https://www.crowdstrike.com/en-us/global-threat-report/), 2026)
## Cost and impact by company size
- **Ransomware features in 88% of small and medium-sized business breaches**, versus 39% for large organizations. ([Verizon DBIR](https://www.verizon.com/business/resources/infographics/2025-dbir-smb-snapshot.pdf), 2025)
- **SMBs with 100 to 250 employees face average recovery costs of $638,536**, excluding any ransom paid. ([Verizon DBIR](https://www.verizon.com/business/resources/infographics/2025-dbir-smb-snapshot.pdf), 2025)
- **Organizations using extensive AI and automation in security saved $1.9 million on average** versus those with none. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **AI-heavy security programs cut the breach lifecycle by 80 days**. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **Organizations that detect their own breach internally save $900,000** versus having the attacker disclose it. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
## Industry breakdowns
- **Healthcare has the highest average breach cost of any industry at $7.42 million**, a position it has held for 14 consecutive years. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **Healthcare breaches take 279 days on average to identify and contain**, well above the 241-day mean. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **Financial services ranks second at $5.56 million average breach cost**, with industrial third at $5.00 million. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **710 large healthcare breaches were reported to HHS in 2025**, exposing at least 61.5 million patient records. ([HIPAA Journal](https://www.hipaajournal.com/2025-healthcare-data-breach-report/), 2025)
- **Financial services was 2025's most-breached sector by compromise count, with 739 incidents**, ahead of healthcare (534) and professional services (478). ([Identity Theft Resource Center](https://www.idtheftcenter.org/publication/2025-data-breach-report/), 2025)
- **Manufacturing espionage-motivated breaches jumped nearly sixfold**, from 3% to 20% of manufacturing breaches year over year. ([Verizon DBIR](https://www.verizon.com/business/resources/infographics/2025-dbir-manufacturing-snapshot.pdf), 2025)
## Cloud and SaaS security
- **54% of data stored in the cloud is classified as sensitive**, up from 47% the year before. ([Thales](https://cpl.thalesgroup.com/cloud-security-research), 2025)
- **Only 8% of organizations encrypt 80% or more of their sensitive cloud data**. ([Thales](https://cpl.thalesgroup.com/cloud-security-research), 2025)
- **68% cite credential and secrets theft as the fastest-growing cloud attack tactic**. ([Thales](https://cpl.thalesgroup.com/cloud-security-research), 2025)
- **55% say securing cloud environments is more complex than on-premises**, up from 51% the prior year. ([Thales](https://cpl.thalesgroup.com/cloud-security-research), 2025)
- **Enterprises run an average of roughly 85 SaaS applications** across 2.1 public cloud providers. ([Thales](https://cpl.thalesgroup.com/cloud-security-research), 2025)
- **Valid-account abuse accounted for 35% of cloud incidents** in H1 2024, the primary cloud initial-access tactic. ([CrowdStrike](https://www.crowdstrike.com/en-us/blog/crowdstrike-2025-global-threat-report-findings/), 2025)
## Incident detection and response times
- **Global median attacker dwell time rose to 14 days in 2025**, up from 11 the year before, though still far below the 205-day median of 2014. ([Mandiant M-Trends](https://cloud.google.com/blog/topics/threat-intelligence/m-trends-2026/), 2026)
- **Dwell time is 25 days when an external party notifies the victim**, versus 9 days when the organization discovers it internally. ([Mandiant M-Trends](https://cloud.google.com/blog/topics/threat-intelligence/m-trends-2026/), 2026)
- **Average eCrime breakout time fell to 29 minutes**, with the fastest observed breakout at just 27 seconds. ([CrowdStrike](https://www.crowdstrike.com/en-us/global-threat-report/), 2026)
- **The global mean time to identify and contain a breach fell to 241 days**, a 17-day improvement and the fastest in nine years. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
## Insider threats
- **The average annual cost of insider risk reached $17.4 million in 2025**, up from $16.2 million in 2023. ([Ponemon / DTEX](https://www.dtex.ai/blog/2025-cost-insider-risks-takeaways/), 2025)
- **Large enterprises face average annual insider-risk costs of $26.2 million**. ([Ponemon / DTEX](https://www.dtex.ai/blog/2025-cost-insider-risks-takeaways/), 2025)
- **Organizations spend $211,021 on containment per insider incident but only $37,756 on monitoring**, a lopsided reactive ratio. ([Ponemon / DTEX](https://www.dtex.ai/blog/2025-cost-insider-risks-takeaways/), 2025)
- **Incidents contained within 31 days cost $10.6 million on average, versus $18.7 million at 91+ days**. ([Ponemon / DTEX](https://www.dtex.ai/blog/2025-cost-insider-risks-takeaways/), 2025)
- **65% of organizations with a formal insider-risk program caught incidents earlier** than those without one. ([Ponemon / DTEX](https://www.dtex.ai/blog/2025-cost-insider-risks-takeaways/), 2025)
## Compliance: GDPR, HIPAA and SOC 2
- **Cumulative GDPR fines have reached roughly €6.11 billion since May 2018**, across 2,685 recorded fines. ([CMS Law](https://cms.law/en/int/publication/GDPR-Enforcement-Tracker-Report/numbers-and-figures), 2026)
- **The average GDPR fine is roughly €2.28 million** across all countries and years. ([CMS Law](https://cms.law/en/int/publication/GDPR-Enforcement-Tracker-Report/numbers-and-figures), 2026)
- **Ireland's Data Protection Commission has issued the largest cumulative fine total, €4.04 billion**, including the record €1.2 billion Meta fine. ([CMS Law](https://cms.law/en/int/publication/GDPR-Enforcement-Tracker-Report/numbers-and-figures), 2026)
- **The largest single GDPR fine of 2025 was €530 million against TikTok**, for unlawful EU-to-China data transfers. ([CMS Law](https://cms.law/en/int/publication/GDPR-Enforcement-Tracker-Report/numbers-and-figures), 2026)
- **HHS collected $8.33 million in HIPAA penalties across 21 enforcement actions in 2025**, with 76% citing a risk-analysis failure. ([HIPAA Journal](https://www.hipaajournal.com/2025-healthcare-data-breach-report/), 2025)
- **A SOC 2 Type II audit typically costs $7,000 to $100,000 in auditor fees**, with total program cost commonly $80,000 to $350,000 including readiness and tooling. ([Secureframe](https://secureframe.com/hub/soc-2/audit-cost), 2025)
- **A SOC 2 Type II observation window typically runs 3 to 12 months**, versus a point-in-time snapshot for Type I. ([Secureframe](https://secureframe.com/hub/soc-2/audit-cost), 2025)
## Security spend and the skills gap
- **Worldwide end-user spending on information security was projected to total $213 billion in 2025**. ([Gartner](https://www.gartner.com/en/newsroom/press-releases/2025-07-29-gartner-forecasts-worldwide-end-user-spending-on-information-security-to-total-213-billion-us-dollars-in-2025), 2025)
- **49% of breached organizations plan to increase security investment** after an incident, down from 63% the prior year. ([IBM](https://www.ibm.com/reports/data-breach), 2025)
- **95% of security teams report at least one skills need**, and 59% describe it as critical or significant, up from 44% in 2024. ([ISC2](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study), 2025)
- **41% of teams identify AI as their most pressing skills need**, followed by cloud security at 36%. ([ISC2](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study), 2025)
- **Only 34% of organizations say they have adequate cybersecurity staffing**, while 62% report shortages. ([ISC2](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study), 2025)
- **36% of organizations reported security budget cuts and 24% reported layoffs** in the past year. ([ISC2](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study), 2025)
- **63% of ransomware victims cite a lack of people or skills as a contributing cause** of the attack. ([Sophos](https://www.sophos.com/en-us/content/state-of-ransomware), 2025)
## Cybercrime and law enforcement
- **The FBI's IC3 received 1,008,597 complaints reporting $20.9 billion in losses in 2025**, a 26% increase and the first year past $20 billion. ([FBI IC3](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf), 2026)
- **Investment fraud caused $8.6 billion in losses**, the single largest crime-type category, driven by crypto scams. ([FBI IC3](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf), 2026)
- **Business Email Compromise caused roughly $3.0 billion in reported losses**. ([FBI IC3](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf), 2026)
- **Cryptocurrency-related crime totaled about $11.3 billion in losses**. ([FBI IC3](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf), 2026)
- **Victims over age 60 reported the highest losses of any age group, about $7.7 billion**. ([FBI IC3](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf), 2026)
- **Global cybercrime is projected to cost $12.2 trillion a year by 2031**, the most-cited and most-debated forecast in security. ([Cybersecurity Ventures](https://cybersecurityventures.com/cybercrime-damage-costs-10-trillion-by-2025/), 2025)
## What these cybersecurity statistics mean for 2026
The most useful shift in this year's data is where the money and the risk have moved. Breach costs fell globally for the first time in five years, but only because faster, often AI-assisted, containment is offsetting rising attack volume. In the US, where penalties and litigation are heavier, the average breach still hit a record. So the headline is not that breaches got cheaper, it is that speed of response now decides the bill.
The biggest change at the front door is the vector flip. For years stolen credentials led the way in, but in the 2026 DBIR unpatched vulnerabilities took the top spot at 31% while credential abuse fell to 13%. Patch cadence and exposure management now carry as much weight as identity controls. And AI has become a two-sided line item: it saves money on defense and containment, but shadow AI and unsecured AI models are opening a fresh, expensive class of breach that most companies have no governance for yet.
For smaller teams, the SMB numbers are the ones to sit with. Ransomware is overwhelmingly a small-business event now, and a single median ransom can exceed a small company's entire security budget. The organizations that come out ahead are the ones that detect internally and contain fast, since both of those, not the size of the security stack, are what the cost data rewards.
We keep this page current. If a figure here is out of date or you have a study we should add, tell us through our [editorial standards](/about/methodology/) page.
## Related research from Topickz
- [AI Statistics 2026](/research/ai-statistics-2026/)
- [B2B SaaS Buyer-Behavior Statistics 2026](/research/b2b-saas-buyer-behavior-statistics-2026/)
- [The SSO Tax 2026](/research/the-sso-tax-2026/)
- [The HIPAA Tax 2026](/research/the-hipaa-tax-2026/)