Loading story…
IBM’s 2026 Cost of a Data Breach Study found that the average global cost of a data breach rose 12% year over year to nearly $5 million, while the United States recorded the highest national average at $11.5 million. Healthcare remained the most expensive sector globally at $6.64 million per breach, even after a 10.5% decline from the prior year, and phishing was identified as the most common initial access vector across industries, with an average breach cost of $5.9 million.
The report said breach identification and containment times increased for the first time in five years, with removable media and supply chain compromises taking the longest to resolve. It also found that AI-driven attacks rose 56% year over year, affected one in four organizations, and added roughly $1 million to average breach costs, while shadow AI incidents more than doubled. Ransomware remained a major driver of losses, with 39% of breached organizations reporting at least one ransomware attack in the past year and attackers increasingly using data leaks and public shaming to pressure victims into paying.
See attribution, scope, and your downstream exposure.
1 event from the most recent confirmed update back to the earliest known activity.
IBM’s 2026 Cost of a Data Breach Study reported that average global data breach costs rose 12% year over year to nearly $5 million, with the United States showing the highest average cost at $11.5 million. The study also said healthcare remained the costliest sector globally, phishing was the most common initial access vector, and AI-driven attacks and ransomware continued to increase.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
7 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourceitpro.com
Open sourcefortra.com
Open sourcetechrepublic.com
Open sourcehelpnetsecurity.com
Open sourcehipaajournal.com
Open sourceibm.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
New reporting based on Verizon DBIR’s Breach Impact Study says cyber insurance claims data from roughly 70,000 incidents puts the **median breach impact at about $83,000**, with **small and midsize businesses** facing a median loss near **$38,000** and the most severe cases climbing above **$22 million** for the top 2.5% of incidents at companies with more than $250 million in revenue. The findings argue insured losses are only a floor for total damage, as breach costs also expand through regulatory penalties, litigation, legal fees, and coverage gaps, particularly in heavily regulated sectors such as healthcare and financial services. The data indicates **business interruption** accounted for roughly one-third of known losses in 2024 and can be more operationally significant than reputational harm, while third-party and supply-chain incidents were identified as the events most likely to exhaust cyber insurance limits. Separate reporting adds that ransomware and double-extortion attacks are increasing, with AI helping attackers scale operations, and that staffing shortages, shadow AI, and slow response times further raise losses; organizations using stronger identity controls, DevSecOps, lifecycle management, and faster incident response are better positioned to contain breach costs.
Aug 7, 2026
Verizon’s 2026 Data Breach Investigations Report found that **vulnerability exploitation** became the leading initial access vector for breaches for the first time in the report’s 19-year history, accounting for about **31%** of known breach entry points and surpassing phishing and stolen credentials. Based on more than **31,000 security incidents** and **22,000 confirmed breaches** across **145 countries**, the report said ransomware appeared in **48%** of breaches, financially motivated actors drove most activity, and defenders are falling behind on remediation: surveyed organizations fully fixed only **26%** of critical known exploited vulnerabilities on average, with a median remediation time of **43 days** even as attackers increasingly weaponize flaws within hours. Verizon and other reporting also highlighted rising abuse of third parties, remote monitoring and management tools, infostealer-fed credential theft, and AI-assisted attacker workflows, while voice- and text-based social engineering increasingly outperformed traditional email phishing. The findings were especially stark for healthcare, where Verizon tracked **1,492 incidents** and **1,438 confirmed data disclosures**, many tied to ransomware intrusions launched through exploited vulnerabilities or social engineering. Separate reporting said small and mid-sized healthcare providers remain disproportionately exposed, with eight recently disclosed breaches affecting nearly **2 million people**, including incidents at **Coastal Carolina Health Care** and **Erie Family Health Centers**. Analysts cited limited security resources, slow patching, interconnected vendors, and growing use of unapproved **shadow AI** tools as factors increasing both compromise and data leakage risk in a sector already handling highly sensitive personal and medical information.
Jun 29, 2026
The year 2025 saw a significant escalation in the scale and sophistication of data breaches worldwide, with attackers leveraging advanced tools such as AI-driven phishing, deepfakes, and automated intrusions. High-profile incidents included the compromise of billions of credentials from tech giants, targeted attacks on airlines and telecoms, and the exposure of sensitive customer data from major insurance companies like Aflac. Attack vectors evolved, with phishing, social engineering, supply-chain breaches, and cloud misconfigurations becoming increasingly prevalent. The financial impact of these breaches was substantial, with average costs per incident rising and global cybercrime losses projected to exceed $10 trillion. Notably, the Aflac breach in June 2025 exposed personal and health data of over 22 million individuals, attributed to the Scattered Spider group, prompting the company to enhance security measures and offer extended identity protection services to affected parties. Industry analysis highlighted the dual use of AI by both attackers and defenders, the growing threat of supply-chain and cloud-based attacks, and the persistent challenge of credential theft. The insurance sector, in particular, faced coordinated campaigns, with similar breaches reported at other firms. Organizations responded by resetting credentials, increasing monitoring, and providing support to victims, while regulatory scrutiny and legal actions intensified. The events of 2025 underscored the urgent need for robust security practices, rapid incident response, and proactive threat intelligence to mitigate the evolving risks posed by increasingly resourceful adversaries.
Jun 29, 2026