The global average cost of a data breach stands at $4.88 million — a 10% increase from the previous year, according to a report released by IBM and the Ponemon Institute. This surge, driven by business disruption and post-breach responses, underscores the critical need for robust cybersecurity measures. On average, it takes 292 days to identify and contain a breach involving stolen credentials, according to the report.
Key findings:
- Rising Costs: The average cost of a data breach has jumped to $4.88 million, marking the highest increase since the pandemic. This spike is primarily due to lost business and post-breach activities, which together totaled $2.8 million — the highest in six years.
- AI and Automation Benefits: Organizations that extensively use security AI and automation saw a reduction in breach costs by an average of $2.2 million. These technologies help in faster detection and containment of breaches, reducing the overall impact.
- Skills Shortage: Over half of the breached organizations reported severe security staffing shortages, a 26.2% increase from the previous year. This shortage correlates with higher breach costs, emphasizing the need for skilled cybersecurity professionals.
- Shadow Data: 35% of breaches involved shadow data — unmanaged data sources — resulting in a 16% higher cost of breaches. This highlights the challenges in tracking and safeguarding proliferating data.
- Customer PII: Nearly half of all breaches involved customer personal identifiable information (PII), which can lead to significant financial and reputational damage.
Between the lines: The report also highlights the growing trend of organizations passing breach costs onto customers through price hikes, which can be risky in a competitive market already facing pricing pressures from inflation.
