2026 Data Breach Investigations Report Overview

The 2026 Data Breach Investigations Report (DBIR) provides an analysis of over 31,000 cybersecurity incidents, including more than 22,000 confirmed data breaches from organizations across 145 countries. This report marks the largest dataset examined in a single DBIR edition. The overarching theme emphasizes maintaining a strong cybersecurity foundation amidst evolving threats. The report discusses the increasing reliance on generative artificial intelligence (GenAI) by threat actors, who utilize it for various stages of cyberattacks, including target selection and malware development. Additionally, it highlights the growing sophistication of social engineering tactics. The report aims to equip enterprises with insights to effectively navigate the changing cybersecurity landscape. It also details the VERIS framework used for data normalization, which aids in the statistical analysis of incidents. The findings are intended to inform organizations about current threats and encourage proactive measures to enhance their cybersecurity posture.