The number every CISO will paste into a budget deck this year: $4.44 million — the global average cost of a data breach, down 9% and the first decline in five years. The number that should worry US-based boards: $10.22 million, a record high for American organizations, moving the wrong way while the rest of the world improves. Both figures come from IBM’s most recent Cost of a Data Breach report, and both get re-baselined when the next edition lands this summer.
This brief gives you the benchmarks worth quoting, explains why the averages moved in opposite directions, and maps the numbers to the security line items — KnowBe4, Zscaler, CrowdStrike, Microsoft — that IT directors actually use them to justify.
The benchmark numbers
| Benchmark | Direction | |
|---|---|---|
| Global average breach cost | $4.44M | Down 9% — first decline in five years |
| US average breach cost | $10.22M | Up — an all-time record |
| Healthcare average | $7.42M | Highest industry for the 14th straight year |
| Mean time to identify and contain | 241 days | A nine-year low |
| High shadow AI usage premium | +$670K | New cost amplifier in the latest edition |
One methodology caveat before you quote any of this to a board. The IBM/Ponemon study is activity-based costing across roughly 600 breached organizations — it is the best public benchmark we have, but it is a survey-derived average, not an actuarial table. Mega-breaches are excluded from the headline number, and averages hide enormous variance by geography and sector. Use it to frame budget conversations, not to price cyber insurance.
What changed
The global decline is a detection story, not a threat story. Attack volume did not fall — organizations got faster. Mean time to identify and contain a breach dropped to 241 days, the lowest in nine years, and the report attributes much of that to AI-assisted security operations finally paying off in the SOC. Shorter dwell time is the single most reliable cost suppressor in every edition of this study, and it finally moved the headline number.
The US moved the other way. At $10.22 million, American breach costs are now more than double the global average, driven by regulatory penalties, higher detection and escalation spend, and litigation exposure that other jurisdictions simply do not generate at the same scale. Healthcare led all industries again at $7.42 million — the 14th consecutive year at the top — for the familiar reasons: regulated data, legacy clinical systems, and downtime that gets measured in patient outcomes rather than lost transactions.
The takeaway a VP can repeat: breach costs are falling for organizations that detect fast, and rising for everyone operating under US regulatory exposure. The averages are diverging, not converging.
Why it matters
Benchmarks like these do two jobs in an enterprise. First, they anchor the risk register — your finance team wants a defensible loss figure, and “$10.22M if we are US-based, $7.42M if we are healthcare” is defensible in a way an internal guess is not. Second, they justify spend. A security awareness renewal, a zero trust migration, an XDR consolidation — each of these gets approved faster when the cost of doing nothing has a citation behind it.
The diagnostic framing matters more than the averages. If your own mean time to identify and contain is above 241 days, you are now below the global median performance and your expected breach cost skews above the average for your sector. If you are a multinational budgeting off the $4.44M global figure while holding significant US data, you are underestimating — budget off the US number for any incident that touches American residents. And if you have no measured MTTI/MTTC at all, that is the first gap to close, because you cannot claim the fast-containment discount without evidence.
The shadow AI tax
The freshest number in the report is the one most likely to shape 2026 budgets: organizations with high levels of shadow AI — employees using unapproved AI tools with corporate data — paid an extra $670,000 per breach on average. That is a concrete, citable price on an exposure most enterprises have been treating as a policy memo problem.
The mechanism is unglamorous: ungoverned AI tools expand the data footprint, copies of sensitive data end up in places the IR team does not know to look, and discovery and notification costs climb. The fix is governance plus visibility, not prohibition — we covered the policy side in our shadow AI risk and policy analysis, and the $670K figure is the number that turns that policy work from optional to funded.
Where the vendor stack fits
Each headline number maps to a category of spend, which is exactly how these benchmarks get used in procurement. Four vendors come up constantly in those conversations — here is the honest read on each.
KnowBe4 — the human-element line item
Phishing and social engineering remain the dominant initial access vectors, which is the argument for KnowBe4’s human risk management platform (HRM+). Its strengths are breadth — the largest simulation and training content library in the category — and momentum on AI-era threats, including deepfake simulation agents that train staff against AI-generated impersonation of their own executives. The honest caveat: training reduces click rates, but proving behavior change beyond that metric is hard, and awareness spend does not shorten containment time. It fits organizations where the phishing numbers are the problem — compare yours against our phishing click-rate benchmarks before renewing.
Zscaler — the attack-surface line item
Zscaler’s Zero Trust Exchange pitch maps to the cost-avoidance side of the benchmark: fewer exposed entry points, less lateral movement, smaller blast radius. Its own ThreatLabz research claims 51% of organizations had a VPN-related incident in the past year — treat vendor-funded numbers with the usual discount, but the architectural argument for retiring inbound VPN is sound regardless. Zscaler’s inline inspection also gives it a credible shadow-AI angle, since it can see and control which AI tools traffic actually flows to. Downsides: you are inserting a proxy dependency into everything, and migrations off legacy VPN realistically take quarters, not weeks. Best fit: distributed enterprises with large remote workforces.
CrowdStrike — the containment-speed line item
The 241-day figure is CrowdStrike’s sales deck, effectively. Falcon’s case rests on detection and response speed, and Charlotte AI extends that into agentic triage — the category we compared in our AI SOC platforms comparison. Strengths: consistently top-tier detection efficacy and a single-agent architecture that operations teams like. Weaknesses: premium pricing that climbs fast as modules stack, and the 2024 outage remains the standing lesson on single-vendor concentration risk in the endpoint layer. It fits organizations whose gap is dwell time — if your MTTI is north of the benchmark, this category is where the money goes first.
Microsoft — the consolidation line item
Microsoft’s argument is economic: Defender XDR, Sentinel, and Purview arrive effectively bundled for E5 shops, and Purview is the most direct tooling answer to the shadow-AI data governance gap — classifying and tracing the sensitive data that unapproved AI tools put at risk. Security Copilot adds AI-assisted investigation across the stack. The trade-offs are real: module quality varies, licensing is genuinely hard to price, and standardizing your security stack on the same vendor you run identity and productivity on concentrates risk in one attack surface. It fits M365-standardized enterprises that value consolidation over best-of-breed.
What to do about it
- Re-baseline your loss estimate. Use $10.22M for US exposure, your industry average otherwise, and stop quoting the global figure if you hold US data.
- Measure MTTI/MTTC this quarter. 241 days is the line. Above it, prioritize detection and response spend before anything else.
- Put the $670K shadow-AI premium in the risk register. Then fund AI-use visibility and governance against it — a discovery tool plus an approved-tool catalog beats a prohibition memo.
- Time renewals to the report cycle. The next edition lands mid-2026; expect every vendor above to reframe its pitch around the new numbers within weeks. Have your own baseline ready first.
Frequently asked questions
What is the average cost of a data breach in 2026?
The most recent IBM Cost of a Data Breach report puts the global average at $4.44 million — a 9% decline and the first drop in five years. The US average is $10.22 million, a record high. The 2026 edition, due mid-year, will update both figures.
Why did breach costs fall globally but rise in the US?
Faster identification and containment — 241 days on average, a nine-year low — pulled the global number down. US costs rose on regulatory penalties, higher detection and escalation spend, and litigation exposure that other regions do not face at the same scale.
How much does shadow AI add to the cost of a breach?
Organizations with high levels of unapproved employee AI use saw breach costs roughly $670,000 above the average. Ungoverned AI tools spread sensitive data into unmonitored places, which raises discovery, containment, and notification costs.
Which industry has the highest data breach costs?
Healthcare, at $7.42 million per breach — the highest of any industry for the 14th consecutive year, driven by regulated patient data, legacy clinical systems, and the operational cost of downtime.
How is the average cost of a data breach calculated?
IBM’s study, run with Ponemon Institute, uses activity-based costing across roughly 600 breached organizations: detection and escalation, notification, response, and lost business. It excludes mega-breaches from the headline average, so treat it as a planning benchmark rather than a worst-case estimate.
Enterprise Techie publishes vendor-honest analysis like this daily — get the brief by email, free.