Signal AI on both sides of the breach ledger

Summary

AI now shapes both the attack and the defence side of data breaches. Between March 2024 and February 2025, one in six breaches involved attackers who used AI. Organisations that deployed AI and automation in their security contained breaches in 204 days, against 284 days for those that did not, and saved $1.9 million. Among organisations that suffered an AI-related breach, 97% lacked proper access controls for their AI systems. A further 20% were breached through shadow AI used without approval or oversight, which added $670,000 to an average breach cost of $4.4 million.