AI-driven cyberattacks increase data breach losses in ASEAN
IBM reported that cyberattacks using artificial intelligence are causing major data breaches across ASEAN, with organisations facing average losses of US$4.12 million in 2026. Nearly three in ten breaches in the region exploited AI, while organisations with strong AI-based security tools recovered faster and suffered lower losses.
What happened
Nearly three in ten organisations in ASEAN that experienced data breaches reported that the attacks used AI. Cyberattacks using AI can now be conducted more cheaply and quickly, making it harder for organisations to investigate breaches.
Reported impact
Organisations in ASEAN faced average losses of US$4.12 million from data breaches in 2026. The financial services sector recorded the highest average loss at US$6.53 million, followed by the industrial sector at US$5.99 million and the communications sector at US$4.28 million.
Index analysis
Organisations that widely deployed AI and security automation recorded lower average losses of US$3.66 million compared to US$4.86 million for organisations not using such technology. Those using AI and automation identified and handled data breach incidents 123 days faster.
Governance controls
Approximately 71% of organisations in ASEAN said they plan to increase investment in security equipment and governance after experiencing a data breach. A 2025 IBM report found that 97% of organisations that experienced AI-related security incidents lacked adequate AI access controls.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.