Here are five key takeaways from the IBM Cost of Data Breach Report 2025<\/a>.<\/p>\n Organizations that deployed AI and automation in their cybersecurity stack were able to reduce breach lifecycles by <\/span>80 days<\/b> on average, compared to those without such tools. This faster containment saved these organizations an average of <\/span>$1.9 million<\/b> per breach.\u00a0<\/span><\/p>\n AI-powered threat detection and response tools are helping security teams respond faster and more efficiently, especially as breach attempts become more sophisticated and persistent. Faster containment limits the extent of data exposure and potential financial penalties.<\/span><\/p>\n However, <\/span>13% of organizations<\/b> reported breaches of AI models or applications. Alarming still, <\/span>97%<\/b> of those breaches involved AI systems that lacked <\/span>proper access controls<\/b>. <\/span>Explanation:<\/b> As AI is increasingly integrated into operations, it also becomes a high-value target for attackers. Without strong controls, AI models can be manipulated or exposed, leading to compromised decision-making systems and sensitive data leakage.<\/span><\/p>\n According to IBM’s cost of data breach report 2025, <\/span>63% of breached organizations<\/b> said they either lacked an AI governance policy or were still developing one. Of the remaining 37%<\/strong>, only <\/span>34% perform regular audits<\/b> to detect unauthorized AI use. A major governance gap exists between AI adoption and oversight. The failure to track and secure AI systems leaves organizations open to new classes of cyber threats, including model poisoning, unauthorized inference, and data leaks.<\/span><\/p>\n Phishing accounted for <\/span>16% of initial attack vectors<\/b>, overtaking stolen credentials as the most common method used by attackers to gain system access. Phishing remains a cost-effective and scalable method for attackers to deceive users. Its effectiveness has surged with the help of generative AI, which produces highly convincing phishing emails in a fraction of the time.<\/span><\/p>\n The average cost of a phishing-related breach was <\/span>$4.8 million<\/b>, making it one of the costliest types of attack vectors. These attacks often lead to significant credential compromise and unauthorized access, resulting in widespread data theft and regulatory consequences.\u00a0<\/span><\/p>\n Supply chain compromise became the <\/span>second most common<\/b> initial vector at <\/span>15%<\/b>, and tied for the <\/span>second costliest<\/b> at <\/span>$4.91 million<\/b> per breach. Attackers are exploiting weaknesses in third-party relationships to infiltrate target organizations. These breaches are complex to investigate, harder to contain, and often involve multiple systems and jurisdictions.<\/span><\/p>\n According to IBM’s cost of data breach report 2025, 20% of respondents<\/b> said they experienced a breach caused by incidents involving <\/span>shadow AI <\/b>the use of unauthorized or unmanaged AI tools. Employees or departments may deploy AI without IT oversight, unintentionally exposing the organization to risks such as poor access control, data leakage, or compliance violations.<\/span><\/p>\n Breaches involving shadow AI added an average of <\/span>$670,000<\/b> in cost per incident compared to those with little or no shadow AI presence. These unmonitored systems increase attack surfaces and result in longer detection and response times, ultimately inflating costs and regulatory exposure.<\/span><\/p>\n Shadow AI-related breaches compromised <\/span>65% more personally identifiable information (PII)<\/b> and <\/span>40% more intellectual property (IP)<\/b>, and typically involved <\/span>multi-environment storage<\/b>. Shadow AI systems often operate outside of approved IT infrastructure, and when breached, expose highly valuable data across hybrid or distributed environments, making containment difficult.<\/span><\/p>\n According to IBM’s cost of data breach report 2025, 30% of all breaches<\/b> involved data stored across <\/span>multiple environments, <\/b>including on-premises, private cloud, and public cloud. That\u2019s down from <\/span>40%<\/b> the year before. While slightly less common than last year<\/a>, multi-environment data breaches remain costly due to their complexity and the number of systems involved in remediation efforts.<\/span><\/p>\n These multi-environment breaches cost organizations an average of <\/span>$5.05 million<\/b>, making them the <\/span>most expensive breach type<\/b> by storage location. Distributed data environments complicate visibility, access control, and forensics. This makes detection and containment more difficult, often requiring third-party investigations and extended downtime.<\/span><\/p>\n1. AI Is Both a Cybersecurity Ally and an Emerging Target<\/h3>\n
2. Phishing Surges as Top Initial Attack Vector<\/h3>\n
3. Shadow AI Is Driving Up Breach Costs and Complexity<\/h3>\n
4. Storage Location Greatly Impacts Breach Risk and Cost<\/h3>\n