Cyber threats to cost $10.5T by 2025 as cybersecurity investments surge

ISTANBUL

The financial impact of cyberattacks is expected to reach $10.5 trillion annually by 2025, pushing global companies and governments to rapidly increase investments in cybersecurity, according to a sector expert.

Senad Aruc, founder and CEO of Netherlands-based security operations firm Imperum, told Anadolu that while the cybersecurity sector continues to expand, threats are evolving just as fast — and becoming more costly.

“Cybersecurity investments are not a cost but necessary investments,” he said. “The average cost of a data breach is $4.45 million, according to IBM’s 2023 report, meaning that every budget allocated to cybersecurity pays for itself in the short term by preventing future losses.”

Driven by accelerated digitalization worldwide, cybersecurity has become one of the fastest-growing global industries. Attacks involving ransomware, data breaches and critical infrastructure disruptions now pose threats not only to business continuity but also to national and public safety, experts say.

Aruc noted that awareness and preparedness are just as important as technology itself. “AI-powered solutions are gaining attention, but user behavior is still a key component of keeping systems secure,” he said.

He pointed to the April cyber-attack on UK-based retailer Marks & Spencer, which caused the company to lose $931.2 million in market value. Another major example was the 2017 NotPetya attack, which temporarily crippled global logistics giant Maersk and led to more than $10 billion in total damage.

“Cyber-attacks on critical infrastructure have a ripple effect,” Aruc said. “They disrupt supply chains, affect partners and clients, and in many cases impact national economies.”

He stressed that cybersecurity should no longer be treated as part of a company’s IT expenses, but as a core element of risk management and long-term planning.

ISTANBUL

“Cyber-attacks on critical infrastructure have a ripple effect,” Aruc said. “They disrupt supply chains, affect partners and clients, and in many cases impact national economies.”

He stressed that cybersecurity should no longer be treated as part of a company’s IT expenses, but as a core element of risk management and long-term planning.