State-by-State Cyber Crime Statistics in the USA

State wise Cyber crime complaints in USA

Rank	Region Name	Projected Complaints
1	California	101,878
2	Texas	65,988
3	Florida	55,322
4	New York	38,616
5	Pennsylvania	29,468
6	Illinois	26,973
7	Ohio	26,369
8	Indiana	25,078
9	North Carolina	23,322
10	Arizona	21,307
11	Georgia	20,965
12	Washington	19,089
13	Virginia	18,503
14	Michigan	17,280
15	New Jersey	16,633
16	Maryland	15,886
17	Colorado	15,739
18	Massachusetts	15,089
19	Tennessee	12,085
20	Nevada	11,358
21	Missouri	10,630
22	South Carolina	10,240
23	Wisconsin	10,186
24	Minnesota	9,810
25	Oregon	9,542
26	Alabama	8,300
27	Oklahoma	7,927
28	Iowa	7,615
29	Utah	7,289
30	Louisiana	6,842
31	Kentucky	6,535
32	Connecticut	6,036
33	Kansas	5,084
34	Arkansas	4,494
35	New Mexico	4,117
36	District of Columbia	4,087
37	Mississippi	3,252
38	Idaho	3,266
39	Delaware	2,974
40	Hawaii	2,759
41	Nebraska	2,759
42	West Virginia	2,749
43	New Hampshire	2,480
44	Maine	2,265
45	Montana	1,965
46	Rhode Island	1,740
47	Wyoming	1,459
48	South Dakota	1,376
49	North Dakota	938
50	Vermont	993

In-depth Analysis

The table illustrates significant differences in cybercrime complaints among U.S. states, highlighting how factors such as population density, economic activity, and digital adoption influence vulnerability.

California leads with a staggering 101,878 projected complaints, a number that far exceeds Vermont’s 993. Experts attribute California’s dominance to its population of 39 million and the concentration of technology companies in Silicon Valley, where both innovators and investors are subjected to sophisticated threats like ransomware.

Criminals specifically target these high-value organizations, aware that they can secure quick payouts following threats.

Florida and Texas closely follow, with projected complaints of 55,322 and 65,988 respectively. Florida’s population, which includes a significant number of retirees exceeding 22 million, is particularly susceptible to investment scams and tech support fraud, as older adults often lack digital literacy.

Texas reflects a similar trend with its rapidly growing metropolitan areas such as Houston and Dallas, where business email compromises flourish amid swift urban development.

While population size is strongly linked to the volume of complaints, other elements also heighten risks. New York, with an anticipated 38,616 reports, suffers due to its status as a financial hub.

Traders on Wall Street are frequently targeted by phishing schemes designed to exploit market volatility, taking advantage of trust in emails that mimic those from brokers. Pennsylvania and Illinois complete the top five, with projected complaints of 29,468 and 26,973 respectively.

Pennsylvania’s rust belt cities, including Philadelphia, are burdened with aging infrastructure, rendering utilities and manufacturers vulnerable to ransomware attacks.

Meanwhile, Illinois, centered around Chicago, experiences increases in personal data breaches, driven by its position as a logistics center where supply chain hacks can disrupt operations.

Mid-tier states such as Ohio (26,369) and Indiana (25,078) underscore industrial vulnerabilities.

These powerhouses in the Midwest depend on manufacturing, where cybercriminals utilize malware through outdated software in factories.

The projection for North Carolina at 23,322 is linked to the biotech boom in the Research Triangle, attracting nation-state actors in pursuit of intellectual property.

Arizona’s tech corridors in the desert, with a projection of 21,307, confront cyber espionage related to border issues, merging physical and digital threats.

Southern states exhibit diverse patterns. Georgia (20,965) benefits from the media industry in Atlanta but faces extortion aimed at celebrities.

Tennessee (12,085) and Alabama (8,300) report fewer incidents; however, the per capita rates remain elevated due to gaps in rural broadband.

Residents in these regions engage in online banking without adequate firewalls, making them susceptible to simple scams such as spoofed calls.

Western states like Washington (19,089) and Colorado (15,739) are at the forefront due to the presence of cloud computing giants in Seattle and aerospace firms in Denver.

Attackers investigate these for vulnerabilities in the supply chain, as evidenced by the repercussions of SolarWinds in 2024. Nevada’s Las Vegas (11,358) is a target for hacks in the gaming sector, where casinos incur significant losses due to insider threats.

The compactness of the Northeastern states enhances reporting efficiency. New Jersey (16,633) and Maryland (15,886) take advantage of their proximity to federal agencies, which encourages the filing of reports.

Massachusetts (15,089), with its universities in Boston, experiences academic espionage, as hackers pilfer research on AI defenses in an ironic twist.

Smaller states reveal issues of underreporting. Wyoming’s projections of 1,459 arise from its sparse population and limited law enforcement resources.

The isolation in rural areas hinders awareness campaigns, leaving elderly residents vulnerable. North Dakota (938) and South Dakota (1,376) reflect similar trends, with their agricultural sectors being targeted by IoT device exploits on farms.

The District of Columbia has recorded 4,087 complaints, which is significant given its size, primarily due to government employees being targeted by spear-phishing attacks from foreign adversaries.

Connecticut, with 6,036 complaints, and Rhode Island, with 1,740, benefit from heightened urban awareness; however, they still fall behind their neighbors due to a sense of complacency in suburban areas.

These patterns arise from larger dynamics. The FBI identifies phishing as the most prevalent crime, accounting for 40% of complaints in 2024, as it requires minimal skills while offering substantial returns. Extortion has increased by 15%, driven by AI-generated deepfakes that blackmail victims.

Data breaches, which represent 20%, take advantage of weak passwords in a time when 300 billion emails are sent globally each year.

Economic motivations propel attackers. States with high GDP per capita, such as California, which boasts a $3.6 trillion economy, present more lucrative targets.

In contrast, low-income regions like Mississippi, with 3,252 complaints, suffer in silence, as victims often lack the means to recover or report incidents.

Demographic factors are also significant. Individuals over the age of 60 accounted for 25% of complaints in 2024, resulting in losses of $5 billion, which explains the increase in Florida. Younger urban residents in technology-driven states tend to report more incidents, aided by applications like the IC3 portal.

Forecasts suggest consistent growth, but uncertainties remain. Threats from quantum computing could escalate by 2026, while regulations such as the Cyber Incident Reporting Act require quicker disclosures, which may inflate the numbers for 2025. States that invest in education, such as Virginia’s cybersecurity academies, might defy these trends.

Policymakers are urged to take action. California has implemented AI sentinels within state networks, leading to a 12% reduction in breaches.

Texas is investing in rural broadband equipped with firewalls, resulting in an 8% decrease in scams. On a national level, public-private partnerships, exemplified by the FBI’s InfraGard, facilitate the sharing of intelligence to prevent attacks.

Victims can instigate change by reporting incidents without delay. The gradients in the table indicate a disparity in resilience: coastal cities are innovating their defenses, while the heartland is lagging behind.

Addressing this disparity requires federal grants for underserved states, compulsory training in educational institutions, and international collaboration against foreign syndicates.

Source

• Federal Bureau of Investigation. (2025). 2024 Internet crime report. Internet Crime Complaint Center.