IBM may be “singing the blues” lately, but they do a great job on tracking cyber trends. They just released their 2026 Cost of a Data Breach Report.
The 2026 Cost of a Data Breach Report was released today and is available for download here. This year’s report, which is 36 pages, reflects new global research from IBM and Ponemon Institute that reveals how AI-driven attacks are growing and how new threats from frontier AI models are forcing a global reckoning on security spending. The report is (as always) chock-full of useful and informative statistics and graphics. Here are 10+ of the most notable stats in the report:
- The global average cost of a data breach is $4.99M, a 12% increase over last year and a record high—driven by higher detection, escalation and lost business costs.
- Average breach costs in the US reached a record $11.5M, an 11% increase over last year and more than double the global average.
- There was a 56% increase in AI-driven attacks, led by AI deepfake impersonations and AI-enabled malware, which drove the highest volume of those incidents.
- The global average breach cost of an AI model inversion attack is $6M, reflecting the growing difficulty of protecting training data and sensitive information.
- Organizations save $1.93M from extensive use of AI and automation in security, compared to organizations using none.
- Among organizations that experienced an AI-related breach, the vast majority (92%) lacked proper AI access controls.
- Ransomware incidents among breached organizations rose slightly this year over last year (39% versus 34%), as attackers used AI to generate malware and expanded their methods of extortion. 41% of ransomware attacks included threats to brand reputation.
- The two most targeted sectors were financial services and energy, where breach costs averaged $6.29M and $5.2M respectively.
- 50% of organizations are deploying AI agents in their security operations center (SOC).
- The mean time that organizations took to identify and contain a breach rose to 247 days, a slight 2.5% uptick that reversed a five-year decline (last year was 241 days). That’s September 4th to identify and contain a January 1st breach! New threats from AI-driven attacks are challenging even the quickest response times and rewiring the security defense clock.
Bottom line: the cost of a data breach is still going up, and we’re starting to revert in the mean time to contain a breach (overall). AI is both creating challenges and helping to address them – in other words, good guys need AI since the bad guys are using it.
Again, the 2026 Cost of a Data Breach Report is available for download here. Check it out!
So, what do you think? Which stat above concerns you the most? Please share any comments you might have or if you’d like to know more about a particular topic.
Image created using DALL-E 3, using the term “robot IT professionals realizing their data has been breached”.
Disclaimer: The views represented herein are exclusively the views of the author, and do not necessarily represent the views held by my employer, my partners or my clients. eDiscovery Today is made available solely for educational purposes to provide general information about general eDiscovery principles and not to provide specific legal advice applicable to any particular circumstance. eDiscovery Today should not be used as a substitute for competent legal advice from a lawyer you have retained and who has agreed to represent you.
