Skip to content
back to the archive page
#Security

[1/2] Cost of a Data Breach Report 2024: findings

#Security #Software #AI #SRE #Architecture #Management

I read the 2024 Cost of a Data Breach Report, produced by IBM with the Ponemon Institute. IBM needs little introduction; Ponemon is an independent research organization focused on privacy, data protection, and information security.

The researchers studied 604 organizations that experienced data breaches between March 2023 and February 2024. The sample covered 17 industries across 16 countries and regions, with incidents involving between 2,100 and 113,000 compromised records. Ponemon interviewed 3,556 security professionals and executives directly involved in those incidents.

Several features make the report useful:

  • This is the 19th annual edition, offering a consistent framework for examining long-term trends.
  • The sample includes organizations of different sizes and industries.
  • The cost model covers detection, notification, response, and lost business.
  • IBM sponsors the report; Ponemon conducts the research independently.
  • The report examines attack vectors, detection times, security technologies, and business consequences.

1. Breach costs are rising

The average cost of a data breach reached USD 4.88 million in 2024, up 10% from USD 4.45 million a year earlier. This was the largest increase since the pandemic. The costs discussed include operational downtime, customer churn, customer support, and regulatory fines.

2. Security AI and automation

Two-thirds of the organizations reported using AI and automation in their security operations centres, up from the previous year. Organizations that used AI extensively in prevention workflows reported an average of USD 2.2 million less in breach costs than those that did not use AI in those workflows.

3. Incident lifecycles

Breaches involving stolen credentials took the longest to identify and contain: an average of 292 days. The corresponding figures were 261 days for phishing and 257 days for social engineering.

4. Compromised data

  • Customer personal information was involved in 46% of breaches, including tax identifiers, email addresses, phone numbers, and home addresses.
  • Intellectual property was involved in 43%. The average cost per compromised intellectual-property record rose to USD 173 from USD 156.

5. Shadow data

Shadow data — information held in unmanaged sources — was involved in 35% of breaches. These incidents were associated with 16% higher breach costs.

6. Business consequences

More than 70% of organizations reported significant or very significant disruption following a breach. More than half passed increased costs on to customers through higher prices for products and services.

I discuss the implications for security and management in part two.

#Security #Software #AI #SRE #Architecture #Management