IoT security stats: what should enterprises prioritise now?

TL;DR: Connected devices have reached over 21 billion globally, organisations face 820,000 IoT attacks daily, and more than 50% of IoT devices contain critical vulnerabilities that attackers can exploit immediately, according to Ordr analysis. The data argues that visibility, segmentation, and patch governance now matter more than reactive device-by-device defence.

Editorial analysis by NHI Mgmt Group, based on content published by Ordr: “IoT Security Statistics”.

By the numbers:

• Connected devices now number over 21 billion globally and are projected to reach 39 billion by 2030.
• More than 50% of all IoT devices contain critical vulnerabilities that attackers can exploit immediately.
• Routers account for over 75% of all IoT-related cyberattacks.

Key questions

Q: What breaks when smart devices are integrated without lifecycle governance?

A: The environment becomes dependent on fragile pairings, repeated manual reintegration, and unclear ownership of trust.

Q: Why do insecure IoT devices create broader enterprise risk?

A: Because once connected devices are inside a trusted environment, they can be used as entry points, persistence platforms, or sources of false data.

Q: What are the signs that IoT segmentation is failing in practice?

A: Warning signs include camera traffic that suddenly scans subnets, talks to new internal hosts, or reaches services outside its normal video-management path.

Practitioner guidance

• Build a complete connected-device inventory Classify every IoT, OT, and IoMT asset by owner, firmware status, exposure level, and business criticality so patching and segmentation decisions are based on facts, not discovery drift.
• Isolate unsupported and high-risk devices first Move routers, cameras, and controllers that cannot be patched or replaced into restrictive zones with minimal east-west access and explicit communication allowlists.
• Map device communications before enforcing policy Use passive monitoring to identify normal device-to-device traffic, then build network rules around actual communication patterns rather than assumptions about how the environment should behave.

Bottom line: IoT risk is accelerating because device growth, attack volume, and unpatchable firmware are expanding faster than many governance models can absorb.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →