Cybercrime’s $1.24 Trillion Record Heist

31222056688?profile=RESIZE_400xWille Sutton, a famous USA bank robber, was quoted as saying, “I rob banks; that’s where the money is.”  The “money” is now in cybercrime.  Cybercrime continues to exact a heavy toll on the world economy, yet accurate figures remain elusive because so many incidents go unreported.  A new Comparitech study of the top 100 countries by GDP has put the annual cost to victims at an estimated $1.24 trillion.  For perspective, $1.24 trillion is about 3.8% of total nominal US Gross Domestic Product (GDP), which is roughly $32.38 trillion.  The research stresses that cybercrime is still severely under-reported by police forces, government bodies and victims themselves.  As a result, the true monetary value of these offenses has stayed largely unknown for years.[1]  

Comparitech examined official cybercrime reports from the top 100 economies. It found usable data for 78 countries but only 27 of those published figures for the financial damage caused. The study deliberately concentrated on targeted crimes that exploit individuals, steal personal data, or gain illegal access to computer systems and networks, rather than mass automated attacks.  By combining the available numbers and adjusting for chronic under-reporting, the researchers built a clearer picture of the scale of the problem. 

According to the report, 103.9 million people fall victim to cybercrime worldwide every year. That equates to more than 1,577 victims for every 100,000 people. The average loss suffered by each victim stands at $9,468.  Taken together, these losses produce the global estimate of $1.24 trillion. Across the top 100 countries alone, the calculated figure is $534.9 billion. Scaling that amount to the entire world population produces a higher total. 

The authors note that even this figure covers only direct losses to victims. It does not include the extra costs of recovery, lost working time, or the money spent on prevention.  Comparitech started with the reported victim numbers and monetary losses from the 27 countries that published both sets of data. From these, it derived the average loss of $9,468 per case. 

An average reported rate of 240 victims per 100,000 people emerged from 78 countries with data. Official sources such as the FBI and the European Union Agency for Fundamental Rights indicate that only about 15 percent of cybercrimes are ever reported. Applying that adjustment raised the real victim rate to 1,577 per 100,000.  Where a country lacked any victim numbers, the researchers applied the global average rate. The resulting totals for the top 100 economies were then scaled by population to reach the worldwide estimate of $1.24 trillion. 

Among the countries examined, the United States records the highest losses: 6.7 million victims and $138.9 billion. Spain follows with 3.3 million victims and $30.9 billion, then France with 2.3 million victims and $22 billion. India shows the largest number of victims at 18.8 million, yet the financial total is lower at $15.7 billion.  Year-on-year changes vary widely. Some nations have seen sharp rises in reported cases while others have recorded falls. Reporting rates also differ dramatically, from a handful of cases in some smaller economies to millions in larger ones. 

The study repeatedly highlights how low reporting rates distort the public picture. Many victims never contact the authorities, and many police forces still treat cybercrime as a low priority. This gap leaves policymakers without reliable data on which to base new laws or allocate resources.  Comparitech concludes that better recording and greater willingness by victims to come forward would give a far more accurate measure of the damage. Until then, the $1.24 trillion figure stands as the best available estimate of the annual cost borne by ordinary people and businesses worldwide.

This article is shared at no charge for educational and informational purposes only.

Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization.  We provide indicators of compromise information (CTI) via a notification/Tier I analysis service (RedXray) or an analysis service (CTAC).  For questions, comments, or assistance, please contact the office directly at 1-844-492-7225 or feedback@redskyalliance.com    

Weekly Cyber Intelligence Briefings:
REDSHORTS - Weekly Cyber Intelligence Briefings
https://attendee.gotowebinar.com/register/7855487668891299929

 

[1] https://www.cybersecurityintelligence.com/blog/cybercrime-inflicts-124-trillion-annual-global-cost-9600.html

You need to be a member of Red Sky Alliance to add comments!