IBM: 92% of Companies Overlook AI Security
IBM: 92% of Companies Neglect AI Security
IBM finds that 92% of companies affected by AI security breaches lacked basic access controls. In nearly every AI-related security incident, the company involved had not implemented access controls for its AI systems. This is the conclusion of IBM's Cost of a Data Breach Report 2026, based on research conducted by the Ponemon Institute among 602 companies. Among the companies that experienced an AI-related incident, 92% had inadequate access controls.
The problem rarely starts with the model itself: in about one in five affected companies, the entry point was a compromised API, a connected application, or a misconfigured cloud service. Whether the company uses an open-source or proprietary model is almost irrelevant.
Le brief IA que les pros lisent chaque soir
Les 7 actus IA du jour, décryptées en 5 min. Gratuit.
Inclus dès l'inscription : notre sélection des meilleurs guides & comparatifs IA.
Choisissez votre rythme
Gratuit · Pas de spam · Désabonnement en 1 clic
IBM attributes these gaps to basic oversights that do not require sophisticated attackers to exploit. Incidents involving AI cost an average of $5.33 million, compared to $4.70 million for those without an AI component. The global average for all data breaches has increased by 12% to reach $4.99 million. When attackers themselves used AI, costs soared to $6.04 million. Without AI, they amounted to $5.03 million.
Brief IA — L'actualité IA en français
L'essentiel de l'actualité de l'intelligence artificielle, décrypté et expliqué chaque jour.