Overview
- The average cost of a data breach in India rose 13 percent to ₹220 million in 2025, the highest level on record.
- Only 37 percent of organisations have AI access controls, nearly 60 percent lack governance policies, and just 34 percent of those with policies deploy governance technology.
- Unmonitored “Shadow AI” added an average of ₹17.9 million to each breach while only 42 percent of companies have measures to detect or manage it.
- Phishing (18 percent), third-party vendor or supply chain compromise (17 percent), and vulnerability exploitation (13 percent) remained the most common initial breach causes.
- Breach identification and containment times fell by 15 days to 263 days in 2025, but 73 percent of organisations report limited or no use of AI-driven security automation that could halve costs.