Cybercrime Costs Soar to $9.5 Trillion, Now a Top Global Economic Threat

Cybercrime has evolved from a niche threat into a dominant force destabilizing the global economy, with annual costs soaring to an estimated $9.5 trillion in 2024. This figure, reported by Cybersecurity Ventures, is rapidly converging on its 2020 prediction of $10.5 trillion in damages by 2025. The staggering escalation—from $3 trillion in 2015—means that if cybercrime were a national economy, it would rank as the world’s third largest. The phenomenon represents what Warren Buffett has termed a bigger threat to humanity than nuclear weapons, signaling a profound transfer of wealth and risk. The impact is both pervasive and devastating, striking corporations and nations with escalating severity. In late 2025, a ransomware attack by the shadowy Spider group halted production at Jaguar Land Rover for weeks, costing the automotive giant approximately $2.2 billion. Earlier that year, a breach at South Korean e-commerce leader Coupang compromised data for nearly 35 million users. These incidents are symptomatic of a broader crisis: the Centre for Strategic and International Studies notes that 2025 was dominated by massive cryptocurrency thefts, sophisticated third-party breaches, and disruptive ransomware, such as an attack on provider OnSolve that disrupted emergency services across multiple U.S. states. The average cost of a data breach now stands at $4.44 million globally, doubling to $10.2 million in the United States. State-sponsored and highly organized cyber operations are amplifying the threat, targeting critical infrastructure with geopolitical motives. In December 2025, the Russia-linked Electrum group disabled roughly 30 sites within Poland’s energy grid. Meanwhile, China-associated group UNC3886 infiltrated all four of Singapore’s major telecom firms for months in mid-2025. The dark web serves as the arsenal for these campaigns, distributing powerful malware and exploit kits capable of disabling entire urban or national economies. According to the Data Breach Investigations Report, over 22,000 cyber-incidents affected public and private organizations across 139 countries in 2025 alone, compromising data for 426 million individuals. Looking ahead, financial institutions are sounding the alarm. The International Monetary Fund warns that cumulative global losses from cybercrime—encompassing direct theft and indirect costs like reputational damage—could reach $23 trillion by 2027, posing a severe risk to macro-financial stability. This forecast underscores a stark new reality: as digitization deepens, every connected entity becomes a potential target. From AI-enabled “CEO fraud” scams to non-state actors leveraging digital currencies and drone technology, the tools for economic mayhem are proliferating, enabling remote attacks that challenge traditional law enforcement and threaten to redefine global security in the digital age.