Get the latest tech news

Shadow AI adds $670K to breach costs while 97% of enterprises skip basic access controls, IBM reports


IBM's 2025 Cost of a Data Breach Report reveals that breaches involving unauthorized AI tools now average $4.63M.

Models, including FraudGPT, GhostGPT and DarkGPT, retail for as little as $75 a month and are purpose-built for attack strategies such as phishing, exploit generation, code obfuscation, vulnerability scanning and credit card validation. Daren Goeson, SVP Product Management at Ivanti, reinforces this: “AI-powered endpoint security tools can analyze vast amounts of data to detect anomalies and predict potential threats faster and more accurately than any human analyst.” Healthcare organizations continue to bear the heaviest burden, with an average cost of $7.42 million per breach, and resolution timelines stretching to 279 days —a full five weeks longer than what their peers in other industries experience.

Get the Android app

Or read this on Venture Beat

Read more on:

Photo of IBM

IBM

Photo of enterprises

enterprises

Photo of costs

costs

Related news:

News photo

Enterprises neglect AI security – and attackers have noticed

News photo

How can enterprises keep systems safe as AI agents join human employees? Cyata launches with a new, dedicated solution

News photo

Positron believes it has found the secret to take on Nvidia in AI inference chips — here’s how it could benefit enterprises