Ponemon Institute: IBM Report: Canada's Data Breach Costs Hit Record High as Attacks Target Critical Infrastructure

Canada’s Data Breach Costs Hit Record High as Critical Infrastructure Faces Growing Cyber Threats

A new report reveals that the average cost of a data breach in Canada has surged to a record CA$7.11 million, the highest since tracking began. The findings, based on breaches experienced by 602 global organizations between March 2025 and February 2026, highlight a shifting cyber risk landscape where larger breaches, prolonged containment times, and attacks on critical infrastructure are driving costs upward.

Key trends include:

• Longer breach lifecycles: The average time to identify and contain a breach increased 6% to 205 days, while the number of compromised records rose 8% to 28,500 per incident.
• Energy sector hardest hit: Breaches in energy organizations averaged CA$9.21 million, making it Canada’s most expensive industry for cyber incidents. Industrial and technology sectors followed at CA$8.15 million and CA$7.82 million, respectively.
• Supply-chain compromise as top cost driver: Attacks via third-party vendors, suppliers, or partners added CA$368,000 per breach, surpassing other factors like security skills shortages and AI-generated threats.
• AI as a cost mitigator: Organizations using AI and automation extensively in security operations reduced breach costs by CA$3.41 million on average, detecting and containing threats faster than those without such tools. However, 42% of Canadian organizations reported facing AI-powered attacks.

The report, conducted by the Ponemon Institute and sponsored by IBM, underscores how interconnected risks particularly through supply chains are expanding attack surfaces. As cyber threats evolve, sectors like energy and industrial operations face heightened disruption risks, with financial and operational consequences extending beyond individual targets.

Source: https://investingnews.com/ibm-report-canada-s-data-breach-costs-hit-record-high-as-attacks-target-critical-infrastructure/

Ponemon Institute cybersecurity rating report: https://www.rankiteo.com/company/ponemon-institute

"id": "PON1785357395",
"linkid": "ponemon-institute",
"type": "Breach",
"date": "3/2025",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"

{'affected_entities': [{'industry': 'energy',
                        'location': 'Canada',
                        'type': 'energy_organizations'},
                       {'industry': 'industrial',
                        'location': 'Canada',
                        'type': 'industrial_organizations'},
                       {'industry': 'technology',
                        'location': 'Canada',
                        'type': 'technology_organizations'}],
 'attack_vector': ['third-party_vendors', 'suppliers', 'partners'],
 'data_breach': {'number_of_records_exposed': '28,500'},
 'date_publicly_disclosed': '2026-03-01',
 'description': 'A new report reveals that the average cost of a data breach '
                'in Canada has surged to a record CA$7.11 million, the highest '
                'since tracking began. The findings highlight a shifting cyber '
                'risk landscape where larger breaches, prolonged containment '
                'times, and attacks on critical infrastructure are driving '
                'costs upward. Key trends include longer breach lifecycles, '
                'higher costs in the energy sector, supply-chain compromise as '
                'a top cost driver, and AI as a cost mitigator.',
 'impact': {'data_compromised': '28,500 records (average per incident)',
            'financial_loss': 'CA$7.11 million (average)',
            'operational_impact': 'disruption risks in energy and industrial '
                                  'sectors'},
 'lessons_learned': 'Supply-chain compromise is a top cost driver, and '
                    'AI/automation can significantly reduce breach costs and '
                    'containment times.',
 'post_incident_analysis': {'corrective_actions': ['AI and automation adoption',
                                                   'third-party risk '
                                                   'management'],
                            'root_causes': ['supply-chain compromise',
                                            'prolonged breach lifecycles']},
 'recommendations': 'Organizations should invest in AI and automation for '
                    'security operations, strengthen third-party risk '
                    'management, and enhance monitoring for critical '
                    'infrastructure sectors.',
 'references': [{'source': 'Ponemon Institute and IBM Report'}],
 'title': 'Canada’s Data Breach Costs Hit Record High as Critical '
          'Infrastructure Faces Growing Cyber Threats',
 'type': ['data_breach', 'supply_chain_attack']}