New York Businesses Lose $249M to Cyberattacks
The state ranks eighth in corporate cybercrime exposure as AI-driven invoice fraud accounts for most financial losses in 2025.
Updated on Oct. 28, 2026 in Cybersecurity
Live Poll
Do you trust that your local businesses are effectively protected against sophisticated cybercrime and invoice fraud?
New York businesses lost $249.4 million to cyberattacks in 2025, according to newly released figures. The state recorded 2,322 business victims during the year, ranking it eighth in the nation for corporate exposure to cybercrime.
Why it matters
The high volume of financial loss highlights the ongoing security vulnerabilities facing the regional business landscape. These losses are largely driven by sophisticated fraud tactics that leverage automation to target corporate financial workflows.
New York reported 32.8 cybercrime victims for every 10,000 businesses in 2025. This impact is dominated by 1,634 email scam and vendor fraud incidents, followed by 285 data breaches, 243 ransomware attacks, and 160 instances of intellectual property theft.
The details
Corporate cybercrime losses are primarily driven by payment redirection and invoice fraud, which account for nearly 90 percent of incidents nationwide. These schemes are increasingly facilitated by generative AI—machine learning models capable of synthesizing text and media—used to mimic legitimate vendors. By impersonating trusted partners, attackers deceive employees into rerouting payments to fraudulent accounts.
Timeline
2025: New York State businesses reported $249.4 million in total losses from cyberattacks.
The Tech Race
New York's 2025 loss profile mirrors the broader national trend where invoice fraud accounts for 90 percent of corporate cybercrime impact. The prevalence of these incidents highlights the difficulty businesses face as AI-driven impersonation methods continue to outpace existing verification protocols.
Businesses in New York must now account for a risk level of 32.8 victims per 10,000 firms. Firms should prioritize upgrading invoice verification workflows, as automated vendor impersonation remains the primary vector for financial loss in the state.
The takeaway
The concentration of losses in invoice and email fraud underscores the necessity for more robust, AI-resistant communication verification. Business leaders should monitor updated state-level exposure reports to track whether specific industrial sectors in New York see a reduction in breach frequency.
Further reading
For broader trends in regional data protection, visit Cybersecurity.
More information
View the complete 50-state cybercrime comparison and map.
Source note: This article includes information reported by LongIsland.
Live Poll
Do you trust that your local businesses are effectively protected against sophisticated cybercrime and invoice fraud?
