Welcome to IBM’s annual Cost of a Data Breach Report, written with the Ponemon Institute. With this
edition, we mark 20 years of data breach research. This year, we
set our sights on the most fundamental technological shift in a
generation: the adoption of AI.
With the 2025 report, we begin chronicling and quantifying
the risks associated with AI. What we’ve found is concerning:
organizations are skipping over security and governance for AI in
favor of do-it-now AI adoption. Those ungoverned systems are
more likely to be breached—and more costly when they are.
We’re not surprised.
Published by
About our partner
IBM Canada Limited
IBM Canada is headquartered in Markham, Ontario and is one of Canada’s top ten private R&D investors; contributing more than $463 million to Canadian research and development initiatives in 2024. IBM has a unique approach to collaboration that provides small and large business, start-ups and developers with business strategies and computing tools they need to innovate. Areas of focus include AI, cloud and security. Canada is also home to IBM's largest microelectronics packaging and test facility in Bromont, Quebec and the largest software development organization in the country, with sites in Markham, Ottawa, and Frederiction. Le siège social d’IBM Canada est situé à Markham, en Ontario, et l’entreprise figure parmi les dix principaux investisseurs privés en recherche et développement au Canada, ayant contribué plus de 463 millions de dollars aux initiatives canadiennes de recherche et développement en 2024. IBM adopte une approche unique de collaboration, offrant aux petites et grandes entreprises, ainsi qu’aux entreprises en démarrage et aux développeurs les stratégies commerciales et les outils informatiques dont ils ont besoin pour innover. Ses domaines de prédilection incluent l’IA, l’infonuagique et la cybersécurité. Le Canada abrite également la plus grande installation d’IBM dédiée à l’assemblage et aux tests de microélectronique, située à Bromont, au Québec, ainsi que la plus vaste organisation de développement logiciel du pays, avec des sites à Markham, Ottawa et Fredericton.
Learn more
Recommendations
From Blueprint to Battle: Implementing Cyber Strategies to Stop Threat Actors in Their Tracks
Let's Chat: Beyond Human Access: Securing Machine Identities — The Next Frontier of Public Sector Cybersecurity
EntraGoat is a deliberately vulnerable lab that simulates real-world identity misconfigurations in Microsoft Entra ID.
GIW QLD: Cybersecurity resilience in a volatile world: People, process and partnership with Steven Woodhouse
