Report: Cybercrime Costs US $12.7 Million a Year

Cyberattacks on Large US Companies, Result in an Average of $12.7 Million in Annual Damages, an Increase of 9.7% from the Previous Year, according to the 5th Cost of Cybercrime Report Published by the Ponemon Institute on Wednesday. The Report, Sponsored this Year by Hewlett Packard’s Enterprise Security Division, Found that, Business Disruption and Information Loss Account for Nearly 3 Quarters of the Cost of Cybercrime Incidents. The Study also Confirmed that, Companies that Make Security a Priority, Have Lower Costs Associated with Security Incidents during the Year. In Particular, Companies that Use Technology that Helps Flag Potential Intrusions into Critical Systems Have Lower Costs, by an Average of $2.6 Million.


“Business disruption, information loss and the time it takes to detect a breach collectively represented the highest cost to organizations experiencing a breach”, Larry Ponemon, Chairman and Founder of the Ponemon Institute, Said in a Statement. The Ponemon Institute has Conducted its Cost of Cybercrime Survey Annually for Each of the Past 5 Years. The Report Suggests that, Companies are Unaware of What is Happening on their Networks. The Average Company Took 170 Days to Detect an Attack and 31 Days on Average to Resolve Cyber Attacks, with Each Day Adding Nearly $21,000 onto the Cost of the Attack. Attacks Involving Malicious Insiders Took the Longest Time — about 2 Months — to Resolve. The Cost of Cybercrime Varies with the Size of the Victims. While the Ponemon Institute Focused on Companies with Greater than 1,000 Employees, the Largest Firms had Greater Costs in Dealing with the Fallout from Cyberattacks.


Yet, Smaller Companies had Higher Damages per Employee, Paying an Estimated $1,601 per Worker, Compared to $437 per Worker for the Largest Companies. Costs were Highest for Energy and Utility Companies and the Financial Industry. In Addition, Companies of Different Sizes had to Deal with Different Primary Threats, according to the Survey. The Most Expensive Attack Type for Smaller Companies was Web-Based Attacks, Followed by the Rogue Gallery of Viruses, Worms, Trojans and Finally Denial-of-Service (DDoS) Attacks. Large Companies Spent More on Denial-of-Service Attacks than Web-Based Attacks and Malicious Code Left by Attackers. Almost All Companies Surveyed had to Deal with Viruses, Worms and Trojan Horses, as well as, Malicious Code Used by Attackers to Compromise Systems.




Info Sources:

http://www8.hp.com/us/en/software-solutions/ponemon-cyber-security-report/index.html?jumpid=va_mq32xtevyi

http://m.hp.com/us/en/news/details.do?id=1815969&articletype=news_release