Canadian Data Breaches Hit Record Costs in 2026, IBM Report Finds
A new report from IBM reveals that data breaches in Canada reached an average cost of $7.11 million per incident in 2026, up from $6.98 million in 2025. The breaches exposed an average of 28,500 records an 8% increase from the previous year and took 205 days to detect and contain, a 6% rise in response time.
The rising costs stem from the complex aftermath of breaches, including business disruption, recovery efforts, legal obligations, and customer communications, according to Chris Sicard, IBM Canada’s security leader. Some companies even pass recovery expenses to clients, amplifying the financial strain.
The report defines data breaches as incidents compromising personally identifiable, financial, medical, or proprietary information, with some attacks exposing up to 115,380 records. High-profile Canadian companies including Rogers, Fido, Telus Digital, Loblaw, Canada Computers, and Ardene have reported breaches in 2026.
Energy companies faced the highest average breach costs at $9.21 million, followed by technology firms ($9.02 million) and industrial organizations ($8.89 million). Sicard attributed the higher costs to their larger networks, sensitive data, and low tolerance for downtime, making them prime targets for attackers.
The report also highlighted the role of AI in cybersecurity, with organizations using AI extensively reporting lower breach costs ($5.5 million vs. $8.91 million) and faster response times 124 days to detect and 57 to contain, compared to 154 days and 71 days for non-AI adopters. AI is increasingly used for vulnerability patching, breach detection, and containment, improving efficiency in mitigating attacks.
Source: https://ca.finance.yahoo.com/news/average-canadian-data-breach-costs-100002780.html
Fido Mobile cybersecurity rating report: https://www.rankiteo.com/company/fido-solutions
Loblaw Companies Limited cybersecurity rating report: https://www.rankiteo.com/company/loblaw-companies-limited
Rogers Communications cybersecurity rating report: https://www.rankiteo.com/company/rogers-communications
Ardene cybersecurity rating report: https://www.rankiteo.com/company/ardene
TELUS cybersecurity rating report: https://www.rankiteo.com/company/telus
"id": "FIDLOBROGARDTEL1785321269",
"linkid": "fido-solutions, loblaw-companies-limited, rogers-communications, ardene, telus",
"type": "Breach",
"date": "1/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Telecommunications',
'location': 'Canada',
'name': 'Rogers',
'type': 'Telecommunications'},
{'industry': 'Telecommunications',
'location': 'Canada',
'name': 'Fido',
'type': 'Telecommunications'},
{'industry': 'Telecommunications',
'location': 'Canada',
'name': 'Telus Digital',
'type': 'Telecommunications'},
{'industry': 'Retail',
'location': 'Canada',
'name': 'Loblaw',
'type': 'Retail'},
{'industry': 'Retail',
'location': 'Canada',
'name': 'Canada Computers',
'type': 'Retail'},
{'industry': 'Retail',
'location': 'Canada',
'name': 'Ardene',
'type': 'Retail'}],
'data_breach': {'number_of_records_exposed': '28,500 (average), up to 115,380',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information',
'Financial information',
'Medical information',
'Proprietary information']},
'date_publicly_disclosed': '2026',
'description': 'A new report from IBM reveals that data breaches in Canada '
'reached an average cost of $7.11 million per incident in '
'2026, with an average of 28,500 records exposed and 205 days '
'to detect and contain. The rising costs stem from business '
'disruption, recovery efforts, legal obligations, and customer '
'communications. High-profile Canadian companies including '
'Rogers, Fido, Telus Digital, Loblaw, Canada Computers, and '
'Ardene have reported breaches in 2026.',
'impact': {'data_compromised': '28,500 records (average)',
'financial_loss': '$7.11 million (average per incident)',
'operational_impact': 'Business disruption, recovery efforts, '
'legal obligations, customer communications'},
'lessons_learned': 'AI adoption in cybersecurity reduces breach costs and '
'improves response times. Organizations using AI '
'extensively reported lower breach costs ($5.5 million vs. '
'$8.91 million) and faster detection and containment (124 '
'days to detect and 57 to contain vs. 154 days and 71 '
'days).',
'recommendations': 'Adopt AI for vulnerability patching, breach detection, '
'and containment to improve efficiency in mitigating '
'attacks.',
'references': [{'date_accessed': '2026', 'source': 'IBM Report'}],
'title': 'Canadian Data Breaches Hit Record Costs in 2026, IBM Report Finds',
'type': 'Data Breach'}