
IBM finds 92% of companies hit by AI security breaches lacked basic access controls
Quick Answer
IBM's 2026 Cost of a Data Breach Report reveals that 92% of companies affected by AI security breaches lacked basic access controls.
Quick Take
The average cost of AI-related incidents is $5.33 million, significantly higher than the $4.70 million for non-AI breaches.
Key Points
- 92% of companies with AI incidents had inadequate access controls.
- Compromised APIs and misconfigured cloud services are common entry points.
- AI-related breaches cost an average of $5.33 million.
- Global average cost of data breaches rose 12% to $4.99 million.
- Costs increase to $6.04 million when attackers use AI.
Source Excerpt
According to IBM, 92 percent of companies that experienced an AI security incident had inadequate access controls for their AI systems. The model itself was rarely the problem.
Want this in your inbox every morning?
Daily brief at your local 8am — bilingual EN/中文, free.
More from The Decoder
See more →
An AI model programmed nonstop for 19 days on a single MirrorCode task that cost $2,600 to run
Epoch AI's MirrorCode benchmark reveals Claude Opus 4.7 as the leader with a 56% solve rate, reconstructing a 16,000-line toolkit in 14 hours. Despite this, all models tested struggle with the most complex tasks, highlighting limitations in current AI capabilities. The single task consumed $2,600 over 19 days, raising questions about cost-effectiveness in AI development.

