US Cyberattacks Hit 1M in 2025; Legal Risks Grow with AI Threats
US cybercrime complaints exceeded 1 million in 2025, driven by AI-enhanced attacks.
Why it matters: Cyber threats are escalating in frequency and complexity, directly impacting legal compliance and risk management. Legal professionals must understand evolving attack methods, including AI-driven breaches, to effectively advise clients and firms on data protection and breach response.
- FBI recorded 1,008,597 cybercrime complaints in 2025, up 17.3% from 2024.
- Financial losses from cyberattacks reached $20.9 billion in 2025, a 25.8% increase year-over-year.
- The average cost of a US data breach rose to $9.44 million in 2025, according to IBM.
- DDoS attacks surged to 1.1 million in the first half of 2026, the highest worldwide.
Cyberattacks in the US keep rising sharply. The FBI's Internet Crime Complaint Center reported 1,008,597 cybercrime complaints in 2025, up 17.3% from 2024. These incidents resulted in $20.9 billion in financial losses, a 25.8% increase year-over-year.
Legal professionals face growing challenges advising clients amid these trends. The average cost of a data breach in the US rose to $9.44 million in 2025. That figure highlights the steep financial risks companies confront from unauthorized access to sensitive data.
Distributed Denial of Service (DDoS) attacks — which overwhelm targeted systems to disrupt normal operations — hit 1.1 million incidents in the first half of 2026, the highest globally per current industry data. Meanwhile, ransomware — malicious software holding data hostage until a ransom is paid — featured in 48% of breaches, up from 44% the year before. A notable case was the Fairlife ransomware attack, which halted production.
Experts emphasize that law firms and legal professionals are prime targets. David G. Ries underscores the importance of cybersecurity literacy for attorneys as their data and communications are attractive to threat actors.
Additionally, AI is intensifying cyber threats. Advanced AI tools automate and accelerate hacking tactics, making attacks more frequent and sophisticated. As detailed by The Atlantic, AI-assisted attacks challenge traditional defenses, heightening the urgency for legal advisors to guide clients on compliance and incident preparedness.
In this environment, staying current on cyber risk trends, breach notification laws, and data protection obligations is essential for legal teams advising in-house counsel and clients across industries.
By the numbers:
- 1,008,597 — FBI cybercrime complaints in 2025
- $20.9 billion — US financial losses from cybercrime in 2025
- 1.1 million — DDoS attacks recorded globally in first half of 2026
What's next: Look for updated cybersecurity regulations and increased enforcement on data breach reporting in 2026 affecting legal compliance frameworks.