Over the past five years, the FBI’s Internet Crime Complaint Center received an annual average of 863,000 cyberattack complaints.
On March 11, 2026, US medical device company Stryker reported a cybersecurity incident to the Securities and Exchange Commission that caused disruptions across its global networks.
According to the most recent Internet Crime Report from the Federal Bureau of Investigation ( FBI ), there were 859,532 cybercrimes reported in the United States in 2024, including nearly 4,900 attacks on critical infrastructure such as manufacturing and healthcare.
While the total number of reported cyberattacks was lower than in 2023 ( 880,418) , financial losses rose over 30%, from $12.5 billion in 2023 to $16.6 billion in 2024.
Cyberattack complaints reported to the FBI's Internet Crime Complaint Center (IC3), 2018–2024
Between 2018 and 2024, the Federal Bureau of Investigation (FBI) received 5.0 million complaints cyber-attacks, with reported losses totaling $56.7 billion.
Financial losses from cyber-attack complaints reported to IC3, 2018–2024
Cyber-attacks and cyber-fraud are a mounting problem for both individuals and the government. Although these are a fraction of total crimes, the financial losses are severe, demonstrating the need for a robust law enforcement response, according to the Government Accountability Office .
The National Institute of Standards and Technology's (NIST) Computer Security Resource Center defines a cyberattack as “any kind of malicious activity that attempts to collect, disrupt, deny, degrade, or destroy information system resources or the information itself.” This includes both technical attacks involving data breaches, as well as personal cons where the victim is communicating with the fraudster.
Types of cyber-attacks include:
The FBI leads national efforts to identify, prosecute, and reduce cybercrimes. These complaints are recorded and investigated by the FBI’s Internet Crime Complaint Center , also known as IC3.
In 2018, the US also established the Cybersecurity and Infrastructure Security Agency (CISA) , responsible for defending the nation’s critical infrastructure from large-scale cyber attacks.
In 2024, the three most common cyberattacks reported were phishing, extortion, and personal data breaches.
Cybercrimes involving investment fraud, particularly using cryptocurrency, led to the most losses in 2024: $6.6 billion.
Reported cybercrimes by victim count and financial loss, 2024
The 60+ age group reported 30% of all financial losses from cybercrimes in 2024, the largest percentage among all age demographics.
Adults aged 60 and up also reported the most crimes (147,127) — 30% higher than the highest cohort, adults aged 40 to 49 (112,755).
Cybercrime complaints and losses by reported age groups, 2024
Cyber (or cybersecurity) threats—like ransomware, malware, and data breaches—aim to steal or damage data and disrupt digital systems.
The IC3 received 4,878 reports from critical infrastructure organizations, with ransomware and data breaches being the most common threats.
Number of ransomware attacks and data breaches against critical infrastructure, by sector, 2024
You can report internet-enabled crime against yourself or someone else via the Internet Crime Complaint Center . The IC3 processes complaints to determine their accuracy and completeness then investigates to return lost documents, information, and financial assets, if possible.
For more info on crime in the US
Internet Crime Report 2024
Cybercrime: Reporting Mechanisms Vary, and Agencies Face Challenges in Developing Metrics
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
