The FBI’s Internet Crime Complaint Center (IC3) recently published its 2022 Internet Crime Report. The study draws data from 800,944 complaints of suspected internet crime reported to the FBI last year. 

In 2022, IC3 tracked financial losses due to internet crime at around $10.3 billion. The top three cyber crimes reported by victims in 2022, similar to last year, were phishing scams, non-payment/non-delivery scams, and personal data breaches. In addition, in 2022, the IC3 received 21,832 Business Email Compromise (BEC) complaints with adjusted losses over $2.7 billion. On ransomware, the IC3 received 870 complaints that indicated organizations belonging to a critical infrastructure sector were victims of a ransomware attack. The report included 3 ransomware attacks at water and wastewater sector entities. While the number of reported ransomware incidents has decreased compared to previous years, it’s believed that not everyone who experiences a cyber incident (including ransomware) reports it. As such, the FBI assess ransomware remains a serious threat to U.S. national security and public safety. Phishing emails, Remote Desktop Protocol (RDP) exploitation, and exploitation of software vulnerabilities remained the top initial access vectors for ransomware incidents reported to the IC3. Access the full report below.