CyphrQChange Healthcare Ransomware Attack 2024: Facts, Costs, OCR Role
The 2024 Change Healthcare ransomware attack: what happened, people affected, UnitedHealth's disclosed costs, and what is known of HHS OCR's response.
North America
Breaches and penalties in the United States and Canada.
2 articles
Losses (bars) Complaints (line)
Ransomware and data-breach complaints from critical-infrastructure sectors, 2024 (number of complaints, not money)
Ransomware Data breach
About this data
Complaints to the FBI IC3 from organisations in 14 US critical-infrastructure sectors (2024 report, p.12). The 2025 report names the most-hit sectors but gives no counts. Source: FBI IC3 Internet Crime Report 2024.
Ransom received per group (USD millions)
Ransom payments received, as stated by officials. Figures cover different periods and aren't comparable totals.
About this data
Each bar is one official statement; bar length uses its leading number only. Quotes and sources are on the Threat groups page.
About this data and sources
What victims told the FBI they lost to cybercrime each year, from the annual reports of its Internet Crime Complaint Center (IC3). It counts every kind of cybercrime, not only data breaches: investment and romance fraud, business email compromise, ransomware and more. Most complaints come from the US. Read it as a floor: many victims never report, and no organisation publishes a worldwide total for breaches alone. 2012 and 2014 are missing because those reports give the total only inside a chart.
Sources
Average cost per data breach by industry (USD millions)
2026 2025
About this data
IBM/Ponemon, Cost of a Data Breach Report 2026, Figure 4. Earlier reports show industry costs only as chart images, so only 2026 and 2025 are listed. Source: IBM Cost of a Data Breach Report 2026.
Victims per group (number of organisations, not money)
Victims stated by officials (as-of dates differ)
About this data
Each bar is one official statement; bar length uses its leading number only. Quotes and sources are on the Threat groups page.
About this data and sources
The average cost of one breach across the organisations IBM/Ponemon studied that year. A single global average was first published with the 2014 study; earlier studies were country by country.
Sources
| Year | North America |
|---|---|
| 2026 | USD 8.35M ▲ above global average |
| 2025 | USD 7.53M ▲ above global average |
| 2024 | USD 7.01M ▲ above global average |
| 2023 | USD 7.30M ▲ above global average |
| 2022 | USD 7.54M ▲ above global average |
| 2021 | USD 7.23M ▲ above global average |
| 2020 | USD 6.57M ▲ above global average |
| 2019 | USD 6.31M ▲ above global average |
| 2018 | USD 6.33M ▲ above global average |
| 2017 | USD 5.83M ▲ above global average |
| 2016 | USD 7.01M ▲ above global average |
| 2015 | USD 5.46M ▲ above global average |
| 2014 | USD 5.85M ▲ above global average |
| 2013 | USD 5.40M |
| 2012 | USD 5.50M |
| 2011 | USD 7.24M |
| 2010 | USD 6.75M |
| 2009 | USD 6.66M |
| 2008 | USD 6.36M |
| 2007 | USD 4.79M |
| 2006 | USD 3.54M |
Average total cost of a data breach as published in IBM/Ponemon "Cost of a Data Breach" reports, by report year, in US dollars. Early studies published only in local currency are left out, not converted. Each region is the average of the markets that year’s study reports for it (North America: United States, Canada); hover a figure to see which. Years with no published figure are left out (the series starts in 2006); "Not in report" means that year’s study did not cover the region, not that it had no breaches. Averages are not added up across years: selecting several years on the map shows their average. Map colours run from yellow (lower cost) to dark red (higher cost), relative to the regions shown. ▲ / ▼: above or below that year’s global average cost per breach.
Sources
- Ponemon 2017 Cost of Data Breach Study: United States (PDF), Figure 2 12-year history
- Ponemon 2015 Cost of Data Breach Study: Global Analysis (PDF)
- Ponemon 2013 Cost of Data Breach Study: Global Analysis (PDF, Symantec-sponsored)
- IBM/Ponemon 2018 Cost of a Data Breach Study: Global Overview (PDF)
- IBM Cost of a Data Breach Report 2026 (PDF), Figure 2 prior-year (2025) column
+ 8 more sources
- IBM Cost of a Data Breach Report 2026 (PDF)
- IBM Cost of a Data Breach Report 2024 (PDF), Figure 2A prior-year (2023) column
- IBM Cost of a Data Breach Report 2024 (PDF)
- IBM Cost of a Data Breach Report 2022 (PDF, archived), prior-year (2021) value
- IBM Cost of a Data Breach Report 2022 (PDF, archived)
- IBM Cost of a Data Breach Report 2020 (PDF)
- IBM Cost of a Data Breach Report 2019 (PDF, archived)
- IBM Australia newsroom, 21 Jun 2017 (2017 Cost of Data Breach Study)