The 2025 Cost of Data Breach Report is the first major study to survey a large sampling of data breach victims about their AI access controls, so the overall security picture in this area is only just starting to come into focus. Thus far it seems fair to say that control and security are not at all keeping pace with the feverish pace of deployment of AI tools.
IBM's annual Cost of Data Breach report, created in conjunction with Ponemon Institute, shows no relief in sight for victims of breaches with a 10% jump in the global average cost on the year. The highest average cost per incident, $5.17 million, was incurred when the breached data was stored in public clouds.
Clorox reported a total of $49 million in incremental expenses related to the attack, with Johnson Controls reporting data breach costs of nearly $27 million. This money went to remediation costs such as third party contracting, as well as added operating costs due to disruptions.
Average cost of data breach has once again hit a new record to $4.45 million, up 15.3% just from 2020. Yet only 51% of organizations that have suffered a breach plan to increase security spending.
The global average cost of data breach is now $4.35 million, a climb of 13% since 2020. Much of that are expenses realized more than a year after the attack, and most organizations (60%) are passing these added costs on to consumers in the form of higher prices.
The average cost of data breach has hit an all-time high, up almost 10% from last year to $4.24 million. That average cost increases greatly when remote workers are involved (to $4.96 million).






