Cost of a Data Breach Report 2026

The AI tipping point

New global research from IBM and Ponemon Institute reveals how AI-driven attacks are growing and how new threats from frontier AI models are forcing a global reckoning on security spending.

4.99M

The global average cost of a data breach, in USD, a 12% increase over last year and a record high—driven by higher detection, escalation and lost business costs.

56%

Increase in AI-driven attacks, led by AI deepfake impersonations and AI-enabled malware, which drove the highest volume of those incidents.

6M

The global average breach cost, in USD, of an AI model inversion attack, reflecting the growing difficulty of protecting training data and sensitive information.

1.93M

Cost savings, in USD, from extensive use of AI and automation in security, compared to organizations using none.

Young business woman using laptop

Key takeaways

Join IBM and industry cybersecurity experts as they unpack this year’s key findings, strategic takeaways and recommendations for how you can limit risk from emerging frontier AI model threats and safeguard your data, people and infrastructure.

Take action

Secure and control agentic identities 

As AI agents proliferate, security teams must transform identity access and control to secure agentic identities. They must ensure that AI agents operate safely through dynamic, identity-based access controls, tightly scoped permissions continuously enforced at runtime, human attribution and auditability.

Two coworkers sit side by side at a shared desk, focusing on a laptop screen during a discussion. The setting appears to be a bright, modern office with large windows and another colleague working in the background. Cables, keyboards, and monitors.

Elevate AI data security practices 

Implement strong data security fundamentals: data discovery, classification, real-time monitoring, threat response and achieve compliance simplification. Leverage AI and data security to protect data integrity and avoid compromise. These measures are essential as AI becomes both a threat vector and a security tool.

A young man wearing glasses sits at a desk, concentrating intently on a computer screen. He rests his hand near his chin, suggesting deep thought or problem solving. The setting appears to be a modern office or workspace with soft, diffused lighting.

Manage and secure AI systems anywhere

As organizations scale AI across platforms, cloud and ecosystems, they can lose control over how models operate—and how data is transformed and accessed. To retain control, organizations should strengthen app, data and machine-agent security and ensure that cloud workloads are configured and monitored.

A person’s hands are shown holding and using a smartphone, with fingers interacting on the touchscreen. The scene appears to be indoors, with a soft, colorful bokeh background suggesting digital or urban lighting. The focus is on the device.

Prepare for post-quantum threats

Gaps in encryption and cryptography management expose organizations to risk. To manage cryptography in the quantum era, organizations should transition to post-quantum encryption algorithms and modernize security practices by discovering cryptography in their environments, analyzing vulnerabilities and remediating risks.

A man in business attire stands indoors, looking intently at complex metallic machinery in the foreground. The scene appears to be at a professional event or exhibition, with blurred equipment and structures framing his face.
Take the next step

Read the report to learn why racing to adopt agentic AI without strengthening security and governance for agents puts your data, people and reputation at risk.

  1. Download report