India's Average Data Breach Cost Hits Record ₹25.5 Crore, IBM Report Finds
A 15.9% year-on-year increase highlights a widening 'AI gap' as security automation becomes a financial necessity.
The average total cost of a data breach in India reached a record high of ₹25.5 crore in 2026, according to the latest IBM Cost of a Data Breach Report. This surge underscores a critical vulnerability in the region's digital infrastructure as the scale and sophistication of cyberattacks accelerate.
The financial impact represents a 15.9% increase from the 2025 average of ₹22 crore. Beyond the monetary loss, the volume of data at risk is climbing; the average number of compromised records per breach rose to 39,500, up from 38,200 the previous year. The report identifies phishing as the primary entry point for attackers at 19%, followed by drive-by compromises at 16% and supply chain compromises at 15%.
The AI Divide
IBM's findings highlight a stark disparity in costs based on the adoption of security automation. Organizations that lacked AI and automation in their security operations paid an average of ₹31.6 crore per breach. In contrast, those with extensive use of these technologies saw costs drop to ₹21.3 crore. This "AI gap" is further complicated by the rise of "Shadow AI," which added an average of ₹1.79 crore to the total cost of a breach when present.
Attackers are also leveraging the technology to scale their efforts. According to the report, 26% of malicious breaches in India were AI-generated. Gaurav Agarwal, Vice President of Technology at IBM India & South Asia, noted that while India’s accelerating AI adoption creates opportunities for innovation, it is simultaneously enabling cyber threats to evolve rapidly.
Sector-Specific Impacts
Certain industries are bearing a disproportionate share of the financial burden. Financial services faced the highest average breach cost at ₹40.9 crore. The technology sector followed with an average cost of ₹35.7 crore, while the communications industry averaged ₹34.5 crore per incident.
Why It Matters
These figures suggest that security automation has shifted from a competitive advantage to a financial necessity. As AI allows attackers to automate the discovery of vulnerabilities and the execution of attacks, manual response times are no longer sufficient to contain damage. The significant cost difference between AI-enabled and non-AI-enabled firms indicates that the ability to detect and contain a breach quickly is the primary driver of cost mitigation.
What's Next
Industry observers will be watching whether Indian organizations accelerate their investment in security governance to match their AI adoption rates. The prevalence of supply chain compromises suggests that the focus may shift toward third-party risk management. Additionally, as Shadow AI continues to introduce hidden costs, companies will likely need to implement stricter policies regarding the unauthorized use of AI tools within corporate networks.