The Quadrillion Report

2025 Cyber Threat Benchmarks

Our annual research reveals key cyber attack trends from the Human Defense Platform. Get insights into account takeover, scraping, carding, and other attacks across more than a quadrillion interactions observed.

What’s New in This Year’s Report?

The Quadrillion Report: 2025 Cyber Threat Benchmarks explores not just trends in cyber attacks observed by the Human Defense Platform, but why those attacks are attractive to threat actors.
Researchers found that hacked accounts can sell on the dark web for thousands of dollars each.
Scraped data can be surprisingly expensive on the dark web, with data sets from major retailers selling for thousands.
One easily accessed dark web marketplace offered hundreds of hacked and fake accounts across a wide variety of platforms.

Industry-Level Insights

Read the Report

Travel & Hospitality
Retail & E-commerce
Financial Services
Streaming & Media
Technology, SaaS, & Services

2025 Quadrillion Report Key Findings

Scraping on Retail & E-commerce Businesses

Retail organizations were highly targeted with scraping attacks by threat actors in 2024, with nearly three in every four attempted scraping attacks observed targeting a retail/e-commerce business.

For one HUMAN customer:

725 million
Attempted attacks in April 2024
95%
Of all traffic in that month

Unscrupulous business managers will capture the information from a competitor and deploy it into their own product.

ATO on Travel & Hospitality Businesses

Attempted ATO rates on travel & hospitality businesses have grown steadily over the past three years, with a 56% rise from 2023 to 2024.

For one HUMAN customer:

28 million
Attempted attacks in September 2024
2,850%
Increase from the average month

Account takeover attacks are among the most common—and lucrative—attacks for a threat actor to pursue. A successful attack can result in a threat actor making lots of money selling the hacked accounts downstream to other threat actors.

Fake Account Creation

The rate of fake account creation jumped dramatically from 2023 to 2024, rising 360%.

For one HUMAN customer:

4.1 million
Fake accounts in December 2024
140,000
On December 29th alone

Many major internet platforms have more fake account activity than account takeover activity because fake accounts are cheaper and easier for threat actors to stage than it is to break into accounts at scale.

Request a Demo