Что случилось
CoinGeek reported on IBM’s 2026 Cost of a Data Breach Report, which surveyed organizations across 16 countries and regions. According to the report, AI-driven attacks rose 56% from 2025, while the average global breach cost increased 12% to $4.99 million. IBM said AI-driven attacks added about $1 million to the average cost of a breach.
CoinGeek reported on August 24 that IBM’s 2026 Cost of a Data Breach Report found the global average cost of a data breach rose 12% to $4.99 million. The source says IBM’s survey covered 16 countries and regions and counted detection and containment costs, regulatory fines, legal expenses, and credit monitoring for affected people. CoinGeek also reported IBM’s estimate that AI-driven attacks increased 56% from 2025. The supplied source does not independently verify the report’s methodology, sample size, or underlying data. The supplied account presents these points as findings from the report, but it does not provide additional detail about how the figures relate to one another, how the categories were defined, or how the reported costs were calculated. Those limitations remain relevant when interpreting the figures as a group.
According to CoinGeek’s account of the IBM report, AI-driven attacks are becoming more attractive to attackers because the tools are cheaper to launch and can operate rapidly at scale. IBM said that speed is changing the economics of breaches and reported that AI-driven attacks added an average of $1 million per incident. The article does not provide case studies, technical descriptions, or independent forensic evidence showing how the attacks were conducted, so the figures should be treated as reported estimates rather than a complete measurement of all AI-enabled cybercrime.
The source says phishing remained the most common attack vector, followed by supply-chain compromise. It identifies attacks involving data replication on removable media as the most complex and longest to resolve among the categories surveyed. CoinGeek reported that the United States had the highest average breach cost at $11.5 million, followed by the Middle East at $8 million and the Benelux region at $7.37 million. ASEAN was reported at $4.12 million, Brazil at $1.41 million, and South Africa at $3.04 million, with South Africa recording the largest percentage increase at 22%.
Подробности об источнике: coingeek.com ↗
Почему это важно
The figures suggest that AI is affecting both the speed and economics of cyberattacks, while organizations are also turning to AI for defense. The source reports that 74% of businesses planning higher security spending expect to deploy AI agents in security operations centers, but it does not establish that those tools reduce breach costs or improve outcomes in practice.
The report matters because it frames AI as both an offensive capability and a defensive response. CoinGeek reported IBM’s warning that AI-driven attacks can raise breach costs by accelerating reconnaissance, execution, or the scale of malicious activity. However, the supplied article does not identify specific incidents behind the estimate or prove that AI caused the overall 12% increase in breach costs. Other factors may also contribute, and the source does not quantify their relative importance.
IBM’s sector figures point to potential systemic consequences. CoinGeek reported average breach costs of $6.29 million for financial services and $5.2 million for energy organizations when discussing AI-related attacks. IBM warned that concentration in those sectors could create cascading effects across consumer finances, economic systems, and power grids. That warning describes a plausible public-risk pathway, but the source does not document an actual cascade or establish how frequently such events occur.
The defensive shift is also significant. CoinGeek reported that 85% of surveyed businesses planned to increase security spending after experiencing a breach, compared with 65% the prior year. Of those organizations, 74% reportedly intended to use AI agents in security operations centers, especially for alert triage, penetration testing, vulnerability scanning, and vulnerability management. These are intended deployments, not evidence of successful implementation. The article gives no results showing that AI agents lower costs, catch more threats, reduce response times, or operate safely without human review.
For the public, the practical issue is not simply whether companies buy more AI security products. It is whether they can use them while preserving reliable oversight, protecting sensitive data, and maintaining clear accountability when automated recommendations are wrong. The source’s statistics support attention to the trend, but they do not support claims that AI is already solving the breach-cost problem.
Интерактивный механизм: как он на самом деле работает
Изучите технологию, лежащую в основе этой разработки, в интерактивном режиме.
crm_get_transaction(id='4092').Which component of an AI application is the machine-learning model itself?
Что посмотреть дальше
Watch for the full IBM methodology, the definition of an AI-driven attack, and independent analysis of the reported increases. The practical test will be whether AI agents improve alert triage, vulnerability management, penetration testing, and response without creating additional errors, privacy risks, or attack surfaces.
The first priority is verification of IBM’s underlying report. The supplied article names the Cost of a Data Breach Report 2026 but does not provide the report’s sample size, respondent profile, survey dates, definitions, or statistical methods. Those details are necessary to assess whether the reported 56% increase reflects a broad change in attacks, a change in reporting or , or a different survey composition. The source also does not explain whether the $4.99 million average is directly comparable with the prior year’s figure.
The definition of an AI-driven attack deserves particular scrutiny. The article does not say whether IBM counted attacks that used for phishing, automated discovery, code generation, social engineering, or other purposes. It also does not distinguish attacks primarily enabled by AI from conventional attacks that used an AI tool incidentally. Without that distinction, organizations may find it difficult to translate the headline statistic into specific defensive priorities.
Следующее испытание — это оперативные данные запланированного развертывания ИИ. Организации должны раскрывать, ограничиваются ли агенты ИИ рекомендациями действий или могут изменять конфигурации, блокировать трафик, запускать сканирование или получать доступ к конфиденциальным системам. Метрики, заслуживающие внимания, включают процент ложноположительных результатов, время на сдерживание инцидентов, пропущенные угрозы, требования к проверке человеком и стоимость обслуживания систем. Источник сообщает, что предполагалось использовать его для сортировки оповещений, тестирования на проникновение и управления уязвимостями, но никаких результатов по развертыванию нет.
Наконец, командам безопасности необходимо будет оценить, создает ли защитный ИИ новые риски. В предоставленном источнике не обсуждаются вопросы хранения данных, ошибок модели, манипуляций с подсказками, несанкционированного доступа или воздействия на цепочку поставок в инструментах безопасности ИИ. Эти неизвестные существенны, поскольку в той же статье компрометация цепочки поставок названа вторым по распространенности вектором атаки, а атаки на съемные носители — особенно трудно поддающимися устранению. Прежде чем отчетные планы расходов можно будет рассматривать как свидетельство повышения безопасности, потребуются независимое тестирование и прозрачные отчеты об инцидентах.