UK Firms Face Surge in AI-Driven Cyber Attacks, IBM Report Reveals
A new IBM study highlights a sharp rise in AI-related security breaches among UK organizations, with 22% of firms reporting incidents in the past year a 56% increase in AI-driven cyber attacks. The findings, part of IBM’s 2026 Cost of a Data Breach report, underscore how cybercriminals are both targeting AI systems and weaponizing the technology to escalate threats.
The financial toll of these breaches is substantial, averaging $6 million per incident, as attackers exploit vulnerabilities in AI models, APIs, and cloud configurations. Nearly 20% of breaches involved direct attacks on AI applications, while 27% stemmed from weaknesses in surrounding systems, such as compromised APIs or misconfigured cloud environments.
AI is also amplifying traditional attack methods. Deepfake impersonation was the most common AI-enabled threat, cited by 45% of respondents, followed by AI-powered malware and phishing campaigns. IBM’s global managing partner for cybersecurity, Mark Hughes, warned that AI has lowered the barrier for attackers, enabling faster, more sophisticated operations.
Despite the growing threat, UK firms are responding with increased investment. 61% plan to boost cybersecurity spending, focusing on incident response, AI governance, and data protection a trend mirrored globally, where 85% of organizations are prioritizing security budgets in response to AI risks. Breach costs in the UK have slightly declined, averaging £3.13 million (down from £3.29 million in 2025), though the total number of incidents rose to 29,870 from 29,000 the previous year.
Sector disparities persist, with financial services facing the highest average costs (£5.46 million), followed by energy firms (£4.03 million). The report signals a shifting cybersecurity landscape, where AI-driven threats demand faster, more adaptive defenses.
Source: https://www.itpro.com/security/data-breaches/one-in-five-breaches-are-now-ai-related-ibm-warns
IBM Company cybersecurity rating report: https://www.rankiteo.com/company/ibm-company
"id": "IBM1785752903",
"linkid": "ibm-company",
"type": "Cyber Attack",
"date": "8/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': ['Financial services', 'Energy'],
'location': 'UK',
'type': 'Organization'}],
'attack_vector': ['AI models',
'APIs',
'Cloud configurations',
'Deepfake impersonation',
'AI-powered malware',
'Phishing campaigns'],
'description': 'A new IBM study highlights a sharp rise in AI-related '
'security breaches among UK organizations, with 22% of firms '
'reporting incidents in the past year—a 56% increase in '
'AI-driven cyber attacks. The findings underscore how '
'cybercriminals are both targeting AI systems and weaponizing '
'the technology to escalate threats. The financial toll '
'averages $6 million per incident, with attackers exploiting '
'vulnerabilities in AI models, APIs, and cloud configurations. '
'AI is also amplifying traditional attack methods, including '
'deepfake impersonation, AI-powered malware, and phishing '
'campaigns.',
'impact': {'financial_loss': '$6 million per incident (global average), £3.13 '
'million (UK average)',
'systems_affected': ['AI applications',
'APIs',
'Cloud environments']},
'lessons_learned': 'AI-driven threats demand faster, more adaptive defenses. '
'Cybercriminals are leveraging AI to lower the barrier for '
'attacks, necessitating increased investment in '
'cybersecurity, AI governance, and data protection.',
'post_incident_analysis': {'corrective_actions': ['Increased cybersecurity '
'spending',
'Focus on incident response',
'AI governance',
'Data protection'],
'root_causes': ['Exploitation of AI models',
'Compromised APIs',
'Misconfigured cloud environments',
'AI-powered attack methods']},
'recommendations': 'Boost cybersecurity spending, focus on incident response, '
'AI governance, and data protection. Prioritize adaptive '
'defenses against AI-driven threats.',
'references': [{'source': 'IBM 2026 Cost of a Data Breach Report'}],
'title': 'UK Firms Face Surge in AI-Driven Cyber Attacks',
'type': ['AI-driven cyber attack', 'Data breach'],
'vulnerability_exploited': ['Weaknesses in AI systems',
'Compromised APIs',
'Misconfigured cloud environments']}