This year’s annual study was conducted in 16 countries or regional samples: the United States, India, the United Kingdom, Germany, Brazil, Japan, France, the Middle East, Canada, Italy, South Korea, Australia, Turkey, ASEAN, South Africa, and, for the first time, Scandinavia.
There were 17 industries represented in the sample (see the section Organization Characteristics for more on the industries included in the study sample).Key findings:
- The average total cost of a data breach in the U.S. for the companies studied has grown from $3.54 million in 2006 to $8.19 million in 2019, a 130 percent increase over 14 years.
- The Middle East had the highest average number of breached records, 38,800, compared to the global average of 25,575.
- The average total cost of a data breach in the healthcare industry was $6.45 million, or 65 percent higher than the average total cost of a data breach.
- Smaller organizations had higher costs relative to their size than larger organizations. The total cost for organizations with more than 25,000 employees averaged $204 per employee.
- Organizations with between 500 and 1,000 employees had an average cost of $3,533 per employee.