IBM puts AI-enabled breach costs at $6M

IBM found one in four malicious breaches was AI-enabled, up 56% year over year, and those incidents cost an average $6 million—about $1 million above the global breach average—in its 2026 study of 602 breached organizations. The counterweight is equally concrete: security AI and automation cut average breach costs by nearly $2 million, yet only 18% of respondents use agents for vulnerability management. For operators, the figures reinforce the case for testing agent defenses before deployment: automate remediation alongside detection, or faster alerts will merely document a widening exposure window.