Southeast Asia data breach costs hit record high in 2026

Data breach costs in Southeast Asia reached a record high in 2026, with an average cost of $4.12 million per incident, according to an IBM study. This represents a 12 percent increase from the $3.67 million average recorded in 2025. IBM attributed the rising costs partly to the use of artificial intelligence, which has enabled faster and cheaper cyberattacks.

In the Philippines, a report from Fortinet found that 93 percent of surveyed organizations experienced at least one security breach in the past year. Over half of these Philippine firms reported losses exceeding $1 million, and 70 percent required more than a month to recover from attacks.

A significant driver of these vulnerabilities is a persistent shortage of qualified cybersecurity professionals. In the Philippines, 71 percent of respondents identified insufficient skills as a leading cause of breaches. While 94 percent of companies are utilizing or experimenting with AI-powered security tools, nearly half expressed concern regarding defending against AI-enabled cyberattacks.