Miscellaneous stats, facts and numbers about the privacy, data and AI ecosystems.

Amount of the largest publicly reported payment to a ransomware attacker – US$75 million

Average amount of ransom payments in Q2 of 2024, as reported by the threat actor negotiation firm Coveware – US$391,015

Percentage of Coveware clients in Q2 of 2024 who chose to pay a ransom – 36

Average cost to Canadian companies who are victim to a ransomware attack – Cdn$6.75 million

Average cost of a data breach response for companies globally in 2023 – US$4.35 million

Average threat actor “dwell time” (the duration a cyber attacker remains undetected in a victim company’s systems) in 2011 – 416 days

Average “dwell time” in 2023 – 10 days

Percentage of S&P 500 companies that referenced “AI" on Q2 2024 earnings calls – 42

Percentage increase in 2023 from 2022 in the number of Fortune 500 companies listing AI as a risk factor in their Security Exchange Company filings – 473.5

Percentage of organizations surveyed by the International Association of Privacy Professionals (“IAPP”) whose privacy teams have acquired additional responsibility for AI governance – 57

Percentage of organizations surveyed by the IAPP whose privacy teams added additional personnel in 2023 – 33

Percentage of Canadian businesses surveyed by Statistics Canada that changed data collection or management practices for AI in the 12 months prior to Q2 2024 – 20.9

Percentage of organizations surveyed by the Capgemini Group that have a designated AI ethics review board, leader, or committee – 53

Rank of Canada’s AI policies and initiatives out of 80 countries surveyed in the Center for AI and Digital Policy’s “Artificial Intelligence and Democratic Values” 2023 report – 1

Number of data breach reports filed with the Office of the Privacy Commissioner of Canada (“OPC”) under the Personal Information Protection and Electronic Documents Act (“PIPEDA”) in the 2023-2024 fiscal year – 693

Percentage of PIPEDA complaint investigations completed in the 2023-2024 fiscal year through the OPC’s informal early resolution process – 90

Number of PIPEDA complaint investigation files that were closed in the 2023-2024 fiscal year by the OPC – 405

Number of those closed investigation files where the OPC’s concerns about a contravention of PIPEDA remained “unresolved” – 2

***

Compiled by Adam Kardash, with contributions from Naomi Chernos and Iman Jaffari

We welcome your feedback about the AccessPrivacy Index at info@accessprivacy.com