Number of U.S. Business Email Attacks by State
Nov. 20, 2024
At STACK Cybersecurity, we understand the devastating impact that Business Email Compromise (BEC) attacks can have on businesses. These sophisticated scams, targeting businesses and individuals alike, exploit email systems to commit financial fraud and cause significant operational disruptions. This scam often occurs when an attacker gains access to legitimate business email accounts through social engineering or hacking, leading to unauthorized fund transfers.
The FBI’s Internet Crime Complaint Center (IC3) reports highlight the growing prevalence and financial impact of BEC attacks across the United States. To help businesses stay informed and better prepared, we’ve analyzed key data from the FBI IC3’s 2021, 2022, and 2023 Internet Crime Reports, as well as state-specific crime statistics. Consult the table to see the number of email attacks in your state. Note the FBI warns that most internet crimes are not reported. This means the number of reported email attacks do not reflect reality.
Our mission is to arm your organization with actionable insights and robust cybersecurity strategies to prevent these threats. Below, we present a detailed state-by-state breakdown of BEC statistics to illustrate the scope of the problem and the importance of taking proactive measures to secure your business.
State-by-State Business Email Compromise Statistics
| State | Total Reported Losses (2023) | Number of Victims (2023) | Average Losses Per Victim (2023) | Total Reported Losses (2022) | YOY Changes in Total Reported Losses (%) |
|---|---|---|---|---|---|
| Alabama | $26,955,606 | 195 | $138,233.87 | $19,629,224 | +37% |
| Alaska | $12,236,756 | 67 | $182,638.15 | $2,987,862 | +310% |
| Arizona | $76,850,493 | 545 | $141,010.08 | $48,491,959 | +59% |
| Arkansas | $15,284,456 | 128 | $119,409.81 | $22,788,271 | -33% |
| California | $412,112,793 | 3,161 | $130,374.18 | $439,425,357 | -6% |
| Colorado | $57,512,670 | 495 | $116,187.21 | $53,961,108 | +7% |
| Connecticut | $38,103,346 | 276 | $138,055.60 | $35,746,379 | +7% |
| Delaware | $9,618,579 | 61 | $157,681.62 | $8,419,097 | +14% |
| District of Columbia | $18,970,376 | 149 | $127,317.96 | $15,279,911 | +24% |
| Florida | $193,828,560 | 1,711 | $113,283.787 | $180,889,707 | +7% |
| Georgia | $88,204,126 | 598 | $147,498.54 | $113,588,916 | -22% |
| Hawaii | $2,841,044 | 73 | $38,918.41 | $4,443,071 | -36% |
| Idaho | $17,412,873 | 99 | $175,887.61 | $12,531,126 | +40% |
| Illinois | $94,174,031 | 773 | $121,829.28 | $83,883,493 | +12% |
| Indiana | $55,751,807 | 326 | $171,017.81 | $22,483,945 | +148% |
| Iowa | $10,906,708 | 161 | $67,743.53 | $16,716,697 | -35% |
| Kansas | $19,761,290 | 143 | $138,190.84 | $21,789,894 | -9% |
| Kentucky | $20,269,246 | 164 | $123,592.96 | $13,641,891 | +49% |
| Louisiana | $17,565,708 | 167 | $105,183.88 | $18,467,023 | -5% |
| Maine | $4,516,013 | 54 | $83,629.87 | $5,347,402 | -16% |
| Maryland | $55,021,852 | 412 | $133,548.18 | $43,217,922 | +27% |
| Massachusetts | $65,960,320 | 501 | $131,657.33 | $72,232,592 | -9% |
| Michigan | $50,623,006 | 561 | $90,237.09 | $68,721,629 | -26% |
| Minnesota | $69,732,152 | 321 | $217,234.12 | $24,935,817 | +180% |
| Mississippi | $7,399,653 | 71 | $104,220.46 | $14,672,094 | -50% |
| Missouri | $30,188,586 | 339 | $89,051.88 | $49,116,067 | -39% |
| Montana | $3,891,985 | 83 | $46,891.39 | $7,148,037 | -46% |
| Nebraska | $10,538,005 | 105 | $100,361.95 | $5,359,750 | +97% |
| Nevada | $46,004,149 | 235 | $195,762.34 | $27,786,876 | +66% |
| New Hampshire | $6,995,141 | 106 | $65,991.90 | $2,593,546 | +170% |
| New Jersey | $140,070,206 | 628 | $223,041.73 | $62,949,746 | +123% |
| New Mexico | $3,775,992 | 83 | $45,493.88 | $6,881,044 | -45% |
| New York | $216,249,339 | 1,324 | $163,330.32 | $216,192,152 | +0.03% |
| North Carolina | $69,988,104 | 596 | $117,429.70 | $52,718,983 | +33% |
| North Dakota | $4,692,621 | 46 | $102,013.50 | $2,720,709 | +72% |
| Ohio | $59,124,423 | 565 | $104,645.00 | $55,234,618 | +7% |
| Oklahoma | $22,651,833 | 208 | $108,903.03 | $31,445,399 | -28% |
| Oregon | $22,817,664 | 301 | $75,806.19 | $30,108,808 | -24% |
| Pennsylvania | $96,052,798 | 731 | $131,399.18 | $92,550,017 | +4% |
| Rhode Island | $14,195,616 | 62 | $228,961.55 | $8,992,082 | +58% |
| South Carolina | $30,639,826 | 384 | $79,791.21 | $46,858,072 | -35% |
| South Dakota | $5,142,217 | 40 | $128,555.42 | $2,532,512 | +103% |
| Tennessee | $49,883,412 | 368 | $135,552.75 | $46,637,795 | +7% |
| Texas | $294,849,405 | 1,917 | $153,807.72 | $260,206,398 | +13% |
| Utah | $38,595,361 | 224 | $171,300.72 | $26,231,307 | +47% |
| Vermont | $1,207,190 | 41 | $29,443.66 | $6,755,695 | -82% |
| Virginia | $63,282,523 | 600 | $105,470.87 | $56,360,110 | +12% |
| Washington | $54,603,486 | 552 | $98,919.36 | $43,920,897 | +24% |
| West Virginia | $3,687,868 | 41 | $89,948.00 | $4,268,151 | -14% |
| Wisconsin | $30,437,803 | 279 | $109,096.07 | $47,023,205 | -35% |
| Wyoming | $2,302,076 | 46 | $50,045.13 | $2,509,854 | -8% |
Why These Numbers Matter
These state-by-state statistics highlight the widespread and varied impact of Business Email Compromise (BEC) attacks across the United States. By detailing total reported losses, the number of victims, average losses per victim, and year-over-year changes for each state, this table provides a granular view of the business email threat landscape. This data is designed to help organizations and individuals recognize the differing levels of vulnerability to these email scams in various states, underscoring the importance of customized and proactive cybersecurity strategies to mitigate these risks.
Data Factoids
- Alaska saw a dramatic increase in total reported losses, jumping by 310% from 2022 to 2023.
- Minnesota experienced a 180% increase in total reported losses, with the average loss per victim being quite high at $217,234.12.
- New Jersey also had a substantial increase of 123% in total reported losses.
- California had the highest total reported losses in 2023 at $412,112,793, despite a slight decrease of 6% from 2022.
- Texas followed with $294,849,405 in total reported losses, showing a 13% increase from the previous year.
- New York reported $216,249,339 in total losses, remaining almost unchanged from 2022.
These insights can help identify trends and areas that may require more focused cybersecurity efforts. The significant increases in some states suggest a growing threat, while the high average losses per victim in certain states highlight the severe impact of these attacks. This data can be valuable for businesses, cybersecurity professionals, and policymakers to develop targeted strategies to combat BEC attacks.
California had the highest number of victims at 3,161. This is significant, especially considering its size and economic influence. Here are a few reasons why:
- Population and Economy: California is the most populous state in the U.S. with over 38 million residents, comprising nearly 12% of the country's total population. The vast number of high-tech headquarters make it a prime target for BEC attacks. The high number of victims (3,161) and total reported losses ($412,112,793) reflect this.
- Business Density: With a high concentration of businesses, especially in tech hubs like Silicon Valley, there are more opportunities for cybercriminals to exploit vulnerabilities.
- Economic Impact: The financial losses in California are substantial, and even a small percentage adjustment can represent a significant sum. The slight decrease of 6% from 2022 still leaves the state with the highest total losses, indicating a persistent and unmitigating threat.
- Awareness and Preparedness: The high numbers may also suggest businesses in California are more likely to report incidents, which can be an indication of awareness and proactive measures.
Overall, while the large numbers are partly due to the state’s size, they also highlight the importance of robust cybersecurity measures to protect against BEC attacks. This data can help drive targeted efforts to improve security and reduce the impact of these attacks in California and similar high-risk areas.
State-specific statistics for Business Email Compromise (BEC) are crucial for enhancing cybersecurity efforts because they show how these attacks are distributed and their impact across different regions. By analyzing these stats, businesses, law enforcement, and policymakers can identify hotspots where BEC attacks are more prevalent and allocate resources more effectively to those areas. This granular data helps organizations tailor their cybersecurity strategies to address the specific threats they face, ensuring more targeted and effective defenses.
Additionally, understanding the variations in BEC incidents and losses across states can drive awareness and training programs, helping to educate businesses and individuals about the risks and best practices to mitigate these attacks. By understanding the prevalence and impact of BEC attacks in their state, businesses can assess their own risk levels more accurately. This helps to prioritize cybersecurity investments and efforts where they are most needed.