Data Leaks and Ransomware Attacks Are the Biggest Threats to Organizations

In a report published by IBM analyzing 500 companies worldwide that experienced data breaches in 2019, we can read that:

• the average total cost of a data breach was $3.92 million,

• the average size of a data breach was 25,575 records,

• the cost per record was $150,

• the average time to identify and contain a breach was 279 days,

• the highest average cost of a data breach occurs in the USA at $8.19 million,

• the highest average cost of a data breach concerns the healthcare industry at $6.45 million,

And what’s more?

• Loss of business is the biggest factor affecting potential financial losses resulting from data breaches,

• Consequences of data breaches are visible for many years,

• The “lifecycle” of a data breach is getting longer,

• Data breaches resulting from application errors or directly from human errors “still cost millions”,

• Encryption, business continuity management, DevSecOps, and threat analysis are the main factors limiting losses related to data breaches,

• Having dedicated SOC teams and regular testing of security procedures allowed to reduce losses related to data breaches by approximately $1.2 million.

Related Terms

Learn key terms related to this article in our cybersecurity glossary:

• Ransomware — Ransomware is a type of malicious software (malware) that blocks access to a…
• Security Operations Center (SOC) — Security Operations Center (SOC) is a central location where a team of security…
• SOC as a Service — SOC as a Service (Security Operations Center as a Service), also known as…
• Backup — Backup, also known as a backup copy or safety copy, is the process of creating…
• Cybersecurity — Cybersecurity is a collection of techniques, processes, and practices used to…

Learn More

Explore related articles in our knowledge base:

• New trends in ransomware attacks in 2025: how to defend a company against the evolving threat?
• Cyber Trends: Ransomware
• Data Protection Challenges
• How IBM Global Mirror Works: Data Replication, Consistency, and Long-Distance Security
• Ransomware in industry: Why do factories pay ransom and how to build an effective defense plan?

Explore Our Services

📚 Read the complete guide: Ransomware: Ransomware - czym jest, jak się chronić, co robić po ataku

Need cybersecurity support? Check out:

• Incident Response - rapid response to security incidents
• SOC as a Service - 24/7 security monitoring
• Backup & Disaster Recovery - data protection and business continuity

Cybersecurity for Your Industry

Learn more about cybersecurity in your industry:

• Cybersecurity for Healthcare

Why this matters for organizations

Learn why data leaks and ransomware attacks are the biggest threats to organizations. Discover data protection strategies and best practices that can help minimize the risk of these attacks. In the context of growing cyber threats and tightening regulations (NIS2, DORA), organizations must proactively manage this security area. Failure to implement adequate safeguards can lead to data breaches, financial penalties, and reputational damage.

Best practices for implementation

Effective implementation requires several key steps:

1. Risk assessment and inventory — identify assets, threats, and vulnerabilities specific to your organization.
2. Policy development — document requirements, roles, and responsibilities.
3. Technical controls — deploy tools and configurations proportionate to identified risks.
4. Training and awareness — engage employees in protecting organizational security.
5. Monitoring and continuous improvement — regularly verify effectiveness and adapt to the evolving threat landscape.

Related topics

See also:

• NIS2 for hospitals — implementation and funding
• Security Audit Pricing Calculator