The 2026 IBM Cost of a Data Breach Report puts the global average cost of a breach at 4.99 million dollars, a 12 percent increase over the prior year and the highest figure recorded across the 21 editions of the study. The cost curve has climbed steadily from 3.92 million dollars in 2019, with a dip to 4.44 million dollars in 2025 before this year's record.

Artificial intelligence now carries a measurable price premium. IBM found that AI played a role in one in four malicious breaches, a 56 percent increase over the prior year. Those incidents cost organizations an average of 6 million dollars, roughly 1 million dollars more than the overall average.

More than 20 percent of studied organizations experienced a breach involving AI models or applications. The most common causes were weaknesses around AI systems rather than the models themselves, including compromised APIs, applications and plug ins, along with cloud misconfigurations affecting AI workloads.

Costs vary sharply by sector. Healthcare remained the most expensive industry for the thirteenth consecutive year at about 6.6 million dollars per breach. Financial services averaged 6.3 million dollars and energy 5.2 million dollars. Critical infrastructure organizations accounted for 62 percent of reported AI driven attacks.

Security spending shows a return. Organizations using AI and automation extensively in security operations reported breach costs averaging 1.93 million dollars less than organizations that did not. The study was conducted by the Ponemon Institute and covered 602 organizations breached between March 2025 and February 2026.

Source: IBM - https://www.ibm.com/reports/data-breach