Average data breach cost in India climbs to ₹25.5 crore in 2026: IBM report

IBM's latest data breach study highlights rising cyberattack costs in India, with AI-driven threats becoming more prevalent while organizations investing in AI-powered security, automation and governance report faster response times and significantly lower financial losses.

The average cost of a data breach in India has reached a record high in 2026, underscoring the growing financial impact of cyberattacks as organizations face increasingly sophisticated threats powered by artificial intelligence (AI). According to IBM's 2026 Cost of a Data Breach Report, the average organizational loss from a data breach rose to ₹25.5 crore (INR 255 million) this year, marking a 15.9% increase from ₹22 crore (INR 220 million) recorded in 2025.

The report also noted that the scale of data breaches has expanded, with organizations losing an average of 39,500 records per incident, compared with 38,200 records in the previous year. The findings indicate that cyber incidents are becoming both more frequent and more damaging as businesses accelerate digital transformation and AI adoption.

One of the report's key observations is the growing influence of AI in the cyber threat landscape. IBM found that 26% of malicious breaches in India involved AI-generated attacks, reflecting how threat actors are increasingly leveraging AI to automate and scale cyberattacks. At the same time, the report suggests that organizations deploying AI-driven security tools and automation are better equipped to detect, contain and recover from cyber incidents.

AI adoption strengthens cyber defence but gaps persist

Despite the growing importance of AI in cybersecurity, widespread adoption remains limited. According to the report, only 32% of Indian organizations have extensively implemented AI and security automation, while 36% reported limited adoption and 32% have yet to deploy such technologies.

The financial impact of this gap is significant. Organizations without AI-powered security and automation incurred an average breach cost of ₹31.6 crore, substantially higher than the ₹21.3 crore reported by organizations with extensive AI deployment. Companies with limited implementation recorded average losses of ₹23.1 crore per breach.

The study also found that organizations lacking AI and automation took considerably longer to identify cyber incidents, requiring an average of 236 days to detect breaches, compared with 175 days for organizations that had extensively adopted AI-driven security capabilities.

Commenting on the findings, Gaurav Agarwal, Vice President, Technology, IBM India & South Asia, said: "India's accelerating AI adoption is creating immense opportunities for innovation, but it is also enabling cyber threats to evolve rapidly. The findings underscore that organizations using AI and strong governance, were significantly better positioned to fend off cyberattacks. Today, most organizations apply AI in limited ways, often focused on detection. To keep pace, AI with agentic capabilities must be embedded across the full security lifecycle—from detection and analysis to prioritization and remediation. That should be the strategic imperative for businesses to build resilience and a competitive advantage."

Financial services record highest breach costs

The report identified the financial services sector as the hardest hit, with the average cost of a breach reaching ₹40.9 crore. The technology sector followed at ₹35.7 crore, while the communications industry recorded average losses of ₹34.5 crore.

Phishing remained the most common entry point for cyberattacks in India, accounting for 19% of incidents, followed by drive-by compromises and supply chain attacks. The study also highlighted shadow AI as one of the leading cost escalators, adding an average of ₹1.79 crore to breach-related expenses where present.

On the defensive front, offensive security practices such as penetration testing and red teaming emerged as the most effective cost-saving measures, reducing breach-related losses by an average of ₹2.47 crore. Looking ahead, most organizations plan to increase investments in incident response, threat detection technologies, identity and access management, AI security governance and employee cybersecurity awareness, reflecting a broader shift towards strengthening cyber resilience in an AI-driven threat environment.