Canada's Data Breach Costs Hit Record High of $7.11 Million

Canadian companies have been hit with record-breaking data breach costs of $7.11 million in 2026, according to IBM's annual report.

This is a significant increase from previous years and puts Canada fourth among 16 countries and regions tracked by IBM, behind only the United States, the Middle East, and the Benelux region.

The average records compromised per breach have also risen by 8% to 28,500, while the average time to identify and contain a breach has increased by 6% to 205 days.

Supply chain compromise is now the costliest factor in data breaches, adding an average of $367,900 to the final bill when it plays a role. The shortage of security skills also contributes significantly, adding $314,500 on average, while difficulty prioritizing threats and vulnerabilities adds another $311,300.

Critical infrastructure and technology companies are bearing the heaviest costs, with energy, technology, and industrial sectors absorbing losses of $9.21 million, $9.02 million, and $8.89 million respectively.

The report highlights the growing threat of AI-generated attacks, with over a quarter of Canadian organizations surveyed reporting an experience with such attacks. Globally, 92% of organizations that experienced a breach involving one of their own AI models or applications lacked proper access controls on those systems and the data feeding them.