Information Risk Insights Study, Xtreme Edition
Inside the Most Extreme Cyber Events
IRIS 20/20 Xtreme examines the 100 largest cyber incidents of the past five years, representing $18 billion in reported losses and more than 10 billion compromised records. Using enriched data from Advisen’s Cyber Loss Database, the study analyzes the actors, attack types, and financial consequences behind these extreme events—providing organizations with a clearer, data-driven understanding of the scale, patterns, and real-world impact of the most severe cyber risks.
Key Findings
The study focused on the 100 largest cyber incidents over the last five years, totaling $18 billion in losses.
Data breaches, ransomware, fraud, and cryptocurrency theft are the most common and costliest types of extreme cyber events.
One in five of the largest losses over the last five years are attributed to state-affiliated actors, responsible for 43% of all monetary losses.
The financial and information sectors experienced the largest number of extreme loss events.
NotPetya was responsible for nearly 20% of all financial losses across these 103 extreme events.
Get exclusive content, sector-specific updates, and expert commentary
Testimonials
Sign-Up for the Cyentia
Cyber Risk Chronicles Newsletter
Be the first to explore exclusive reports, industry trends, and data-driven strategies designed to empower decision-making.
Request an IRIS-Style Analysis Tailored to Your Organization
Share the questions or risk areas you’d like explored, and we’ll follow up with data-driven insights and benchmarks designed to inform better decisions.