The global average cost of a data breach has climbed to $4.99 million, marking a 12% increase over the previous year and setting a new record, according to IBM's 2026 Cost of a Data Breach Report released July 29. The analysis examined 602 organizations worldwide that experienced breaches between March 2025 and February 2026, revealing significant shifts in both attack methods and financial impact.
Lost business costs represent a major component of breach expenses, stemming from immediate operational disruption and long-term customer attrition due to damaged trust. Attackers have adapted their tactics accordingly, particularly in ransomware operations where 41% of victims reported threats focused on brand reputation damage rather than solely relying on encryption. This evolution reflects what IBM describes as multilayered extortion strategies targeting public perception and business continuity alongside technical disruption.
AI-powered attacks emerged as a significant cost driver during the reporting period, with over 25% of organizations experiencing AI-driven incidents, representing a 56% increase from the previous year. These attacks, primarily involving deepfake impersonation and AI-enabled malware, added an average of $1 million per breach. Mark Hughes, IBM's global managing partner for cybersecurity services, noted that advanced frontier models enable attackers to execute operations in minutes rather than days, dramatically lowering barriers to entry for cybercriminals.
Healthcare maintained its position as the costliest sector for the 13th consecutive year, with average breach costs reaching $6.6 million due to the high value of patient personally identifiable information for identity theft and insurance fraud. The financial sector followed at $6.3 million, with industrial, technology, and entertainment sectors rounding out the top five at $5.5 million, $5.5 million, and $5.4 million respectively.
IBM recommends organizations adopt proactive monitoring of data flows to identify exposure risks before breaches occur, while strengthening governance and compliance frameworks. The report emphasizes implementing zero trust architectures with trusted identity controls for users, data, and machine agents to detect malicious behavior, particularly around identity-based attacks. In response to frontier AI model threats, 85% of surveyed organizations indicated plans to increase security spending.
Source: https://www.infosecurity-magazine.com/news/cost-of-a-data-breach-5m-ibm/