The average attacker conducts eight attacks per year, only 42 of which are successful. Only 59 percent of successful attacks result in any financial payout. Attackers spend an average of 70 hours per attack going up against “typical” IT security infrastructure, 147 hours battling “excellent” infrastructure and give up completely after 209 hours. The majority of attackers have increased their use of hacker tools by 18 percent, and 64 percent say that the tools are “highly effective” Attackers prefer easy targets to harder ones, and will go after the least-defended companies first.”]
Source: https://www.csoonline.com/article/3028787/survey-average-successful-hack-nets-less-than-15-000.html