The Real Cost of Cyberattacks on Businesses

Cyberattacks represent a major challenge for businesses of all sizes today. In 2025, the IT threat landscape is more complex than ever, generating often unsuspected direct and indirect costs. Whether for SMEs or large multinationals, security incidents can result in substantial financial losses, going beyond simple recovery costs. In this article, we will explore in depth the true cost of cyberattacks on businesses, analyzing the various dimensions that make up this growing problem. The Tangible Costs of Cyberattacks: A Tricky Estimation Losses caused by a cyberattack can be divided into two broad categories: the immediate costs associated with responding to the incident, and the long-term costs that can affect the very structure of the business. Companies that suffer a hack face a multitude of expenses. First, there is the cost of cybersecurity, necessary to plug the vulnerabilities exploited by attackers. This often includes deploying new security software and upgrading IT systems. Then there are the costs associated with incident management, where handling data breaches requires considerable human and technical resources.

For example, a survey conducted by a consulting firm revealed that the average cost of a cyberattack for a company in France hovers around €14,720. Despite a slight decrease compared to the previous year, the figures show that companies are still exposed to phenomenal expenses. Many companies are investing colossal sums in cyber insurance.

to protect themselves financially; these policies can often cost up to 30% more than traditional policies due to the increased threat landscape. A summary table showing the costs associated with cyberattacks highlights this complex reality: Cost TypeEstimate (€) Security Software Costs 5,000 – 50,000

Incident Management Fees 10,000 – 100,000 Business Interruption Losses

Recent examples illustrate the disastrous consequences of cyberattacks on leading companies. In particular, the cases of Jaguar Land Rover and Marks & Spencer demonstrate how well-targeted attacks can cause significant business disruption. Jaguar Land Rover, for example, suffered a major hack that led to a complete shutdown of its production for several weeks. Analysts estimate that the loss reached £50 million per week. Considering profits of £2.5 billion the previous year, this shock does not seem fatal, but it highlights the vulnerability of even large companies. Attacks against retail giants such as Marks & Spencer are indicative of the targeted nature and ire of hackers. Losses amounted to approximately £300 million after an attack on their payment system, which brought their online operations to a complete standstill during a crucial period. These security incidents underscore the importance of not only good cybersecurity, but also good incident response planning and digital resilience. The following table summarizes the estimated losses to companies following such cyberattacks: Company

Estimated Cost (€)

Type of Attack Jaguar Land Rover 57 million (approximately)

Ransomware Marks & Spencer350 million

Co-op

150 million

Extortion via malware **These figures clearly show the extent of the damage that a security incident can cause. Large companies do not remain unscathed and must prepare to face increasingly stringent security requirements.**https://www.youtube.com/watch?v=bNQh00P4hsc

Find out everything you need to know about cyberattacks: definitions, types of attacks, consequences, and tips for protecting your data against cyber threats.

The insurance industry plays a fundamental role in mitigating the consequences of a cyberattack. With the increasing number of hacking incidents, many companies are turning to cyber insurance to minimize their financial exposure. These policies primarily cover costs related to data breaches, system recovery, and even post-incident legal requirements.

However, it is important for companies to understand what their insurance policy actually covers and what risks remain uncovered. For example, some policies exclude losses due to service interruptions, whether due to lack of customer access or employee inaction. With this in mind, it is wise to regularly review the terms and conditions to ensure they meet the company’s changing requirements. https://www.youtube.com/watch?v=XQi6aO2CSgY

Ultimately, the cyberattack landscape in 2025 is marked by a diversity of attackers and potential targets. Businesses must remain vigilant and invest in robust solutions to defend themselves against a pervasive and constantly evolving threat. This also requires a strategic analysis of the economic impacts that such a threat can have, not only on their short-term performance, but also on their long-term sustainability.