Data breaches in Canada are becoming more costly and complex, with organizations paying an average of CA$6.98 million per breach in 2025, according to IBM's latest report. This marks a 10.4% increase from CA$6.32 million in 2024, highlighting the escalating financial impact of security incidents.
The report identifies several factors contributing to this rise. The use of unsanctioned AI tools, known as 'shadow AI,' has been found to add CA$308,000 to the cost of each breach. Additionally, organizations without extensive use of security AI and automation reported higher breach costs and longer detection times. Specifically, those not utilizing these technologies faced average breach costs of CA$8.53 million and took 162 days to identify and contain breaches, compared to CA$5.19 million and 118 days for organizations that did.
The financial sector experienced the highest average breach costs at CA$9.97 million, followed by the pharmaceutical sector at CA$7.99 million, and the industrial sector at CA$8.39 million. Phishing attacks were the most common initial attack vector, representing 14% of incidents and costing an average of CA$6.38 million per breach.
The report emphasizes the critical role of security AI and automation in reducing breach costs and improving detection efficiency. Organizations extensively using these tools reported faster breach identification, with the Mean Time to Identify (MTTI) reduced to 118 days, compared to 162 days for organizations not using these technologies.
For Canadian businesses, the rising costs and detection times underscore the importance of investing in robust cybersecurity measures. Implementing security AI and automation, along with developing clear AI policies, can help mitigate risks and reduce the financial impact of data breaches.