--- title: AI Made Cyberattacks Cheaper to Launch. It Didn’t Make Them Cheaper to Survive. description: AI is driving more cyberattacks and higher breach costs. What the 2026 data shows and six steps small and midsize organizations should take now. image: https://simple.askconvergent.com/hubfs/Convergent%20Cybersecurity%20Risk%20Review.png --- [![vast.png](https://simple.askconvergent.com/hs-fs/hubfs/Convergent%20Logo%20clear%20background%2022.png?width=415&height=101&name=Convergent%20Logo%20clear%20background%2022.png "vast.png")](https://www.askconvergent.com) - [About](https://askconvergent.com/about/) - [Solutions](https://askconvergent.com/solutions/) - [Unified Communications & Contact Center](https://askconvergent.com/solutions/unified-communications-contact-center/) - [Cybersecurity](https://askconvergent.com/solutions/cybersecurity/) - [Connectivity](https://askconvergent.com/solutions/connectivity/) - [Artificial Intelligence](https://askconvergent.com/solutions/artificial-intelligence/) - [Cloud Services](https://askconvergent.com/solutions/cloud-services/) - [Managed Services](https://askconvergent.com/managed-services/) - [ConvergentOne UC&C](https://askconvergent.com/managed-services/convergentone-managed-services/) - [Advisory Services](https://askconvergent.com/managed-services/advisory-services/) - [Resources](https://simple.askconvergent.com/blog/) - [Blog](https://simple.askconvergent.com/blog) - [Technical Resources](https://connect.askconvergent.com/technical-library) - [Video Resources](https://connect.askconvergent.com/video-resources) - [Contact](https://askconvergent.com/contact/) CLOSE - Support Portals - [Customer Portal](https://askconvergent.myportallogin.com) - [Employee Portal](http://portal.office.com) MENU Support Portals - [Customer Portal](https://askconvergent.myportallogin.com) - [Employee Portal](http://portal.office.com) # AI Made Cyberattacks Cheaper to Launch. It Didn’t Make Them Cheaper to Survive. Nov 9, 2026 | By [Chris Jones](https://simple.askconvergent.com/blog/author/chris-jones) A convincing phishing email used to take effort. Someone had to research the target, write it well and get the details right. Now AI writes it in seconds, in polished English, in the voice of your CFO. It can clone that CFO’s voice for a phone call, too. Attackers didn’t get smarter. They got faster and cheaper. On the receiving end, the costs went the other way. ## **What the 2026 numbers show** - Breaches cost more than ever. IBM’s 2026 Cost of a Data Breach Report put the global average at a record $4.99 million, up more than 10% from the year before. Breaches at U.S. organizations averaged more than twice that figure. - AI is driving a growing share of attacks. More than one in four organizations hit by a malicious attack said AI drove it. Those breaches cost about $1 million more than attacks without AI. Deepfake impersonation was behind close to half of them. - Ransomware is still the main event. Verizon’s 2026 Data Breach Investigations Report found ransomware in 48% of breaches, and 15% of attack techniques are now bolstered by generative AI. - The front door moved. Software vulnerabilities, at 31%, have overtaken stolen passwords as the top way attackers get in. Mobile devices have become a favored target, with click rates 40% higher than email. - Breaches last longer. The average time to identify and contain a breach rose to 247 days, reversing five straight years of improvement. - 81% reported a security breach, a data breach or both in the past year. - AI-powered attacks were a root cause in more than 40% of incidents. - 62.5% of breached businesses reported a total financial impact above $250,000, and 36.7% reported more than $500,000. - 38.3% raised prices to cover the costs, a hidden tax their customers paid. ## **Small businesses are not too small to target** If those numbers sound like a large-enterprise problem, the small business data says otherwise. The Identity Theft Resource Center surveyed 662 owners and executives at companies with 500 or fewer employees for its 2025 Business Impact Report: Here’s the part that should worry every leadership team. The share of small business leaders who felt very prepared for an attack fell from 56.5% to 38.4%. Multifactor authentication adoption fell from 33.6% to 27.2%. Attackers are automating. Too many defenses are going backward. ## **The risk you didn’t buy: shadow AI** Not every AI risk comes from outside. IBM found that employees using unapproved AI tools figured in 43% of security incidents, more than double the year before. According to the Cyber Readiness Institute’s summary of Verizon’s report, 67% of users reach AI services through non-corporate accounts on work devices. Your data is going places your security tools can’t see. ## **Six steps to take now** 1. Turn on multifactor authentication everywhere, starting with email, remote access and financial systems. It’s the cheapest control you’ll ever buy. 2. Patch what faces the internet first. With vulnerabilities now the top entry point, firewalls, VPNs and remote access tools go to the front of the line. 3. Train for the phone call, not just the email. Set a rule: Any change to payment details gets verified by calling a known number. A deepfake voice can’t pass that test. 4. Know who is watching after hours. Attacks don’t keep business hours. If no one monitors your environment around the clock, decide whether that should be your team or a managed provider. 5. Write an AI use policy. Name the approved tools and spell out what data can and can’t go into them. 6. Test your recovery. Backups only matter if they work when you need them. The Cyber Readiness Institute reported that 69% of small and midsize businesses declined to pay a ransom because they had reliable backups. ## **Where to start** Security decisions are hard to make in isolation, and the market is crowded with products that each solve one piece. Convergent is a vendor-neutral technology advisor. We map your current coverage against what you actually need and bring options sized to your organization. Start by finding out where you stand. The Convergent Technology Snapshot takes about five minutes and scores your security posture alongside your contracts, network, voice and recovery, with the top findings worth acting on first. ### Posts by Topic - [AskConvergent (31)](https://simple.askconvergent.com/blog/tag/askconvergent) - [Cybersecurity (19)](https://simple.askconvergent.com/blog/tag/cybersecurity) - [Business Technology (14)](https://simple.askconvergent.com/blog/tag/business-technology) - [Work From Anywhere (12)](https://simple.askconvergent.com/blog/tag/work-from-anywhere) - [IT Strategic Planning (10)](https://simple.askconvergent.com/blog/tag/it-strategic-planning) - [Cloud UC (7)](https://simple.askconvergent.com/blog/tag/cloud-uc) - [Contact Center (5)](https://simple.askconvergent.com/blog/tag/contact-center) - [Cloud Unified Communcations (4)](https://simple.askconvergent.com/blog/tag/cloud-unified-communcations) - [Managed Services Provider (4)](https://simple.askconvergent.com/blog/tag/managed-services-provider) - [Technology Advisor (4)](https://simple.askconvergent.com/blog/tag/technology-advisor) - [VOIP (4)](https://simple.askconvergent.com/blog/tag/voip) - [11:11 Systems (3)](https://simple.askconvergent.com/blog/tag/1111-systems) - [Technology Consulting (3)](https://simple.askconvergent.com/blog/tag/technology-consulting) - [Technology Sourcing (3)](https://simple.askconvergent.com/blog/tag/technology-sourcing) - [VMware (3)](https://simple.askconvergent.com/blog/tag/vmware) - [AI (2)](https://simple.askconvergent.com/blog/tag/ai) - [Avaya (2)](https://simple.askconvergent.com/blog/tag/avaya) - [CATO (2)](https://simple.askconvergent.com/blog/tag/cato) - [Enterprise (2)](https://simple.askconvergent.com/blog/tag/enterprise) - [IoT (2)](https://simple.askconvergent.com/blog/tag/iot) - [Mitel (2)](https://simple.askconvergent.com/blog/tag/mitel) - [Mobility (2)](https://simple.askconvergent.com/blog/tag/mobility) - [Press Release (2)](https://simple.askconvergent.com/blog/tag/press-release) - [SASE (2)](https://simple.askconvergent.com/blog/tag/sase) - [Technology ROI (2)](https://simple.askconvergent.com/blog/tag/technology-roi) - [UCaaS (2)](https://simple.askconvergent.com/blog/tag/ucaas) - [eSentire (2)](https://simple.askconvergent.com/blog/tag/esentire) - [Business Technology Planning (1)](https://simple.askconvergent.com/blog/tag/business-technology-planning) - [CCaaS (1)](https://simple.askconvergent.com/blog/tag/ccaas) - [Colocation & Cloud (1)](https://simple.askconvergent.com/blog/tag/colocation-cloud) - [Contract Renewals (1)](https://simple.askconvergent.com/blog/tag/contract-renewals) - [Healthcare (1)](https://simple.askconvergent.com/blog/tag/healthcare) - [Hershey (1)](https://simple.askconvergent.com/blog/tag/hershey) - [IT Advisory Services (1)](https://simple.askconvergent.com/blog/tag/it-advisory-services) - [IT Budget Planning (1)](https://simple.askconvergent.com/blog/tag/it-budget-planning) - [IT Strategy (1)](https://simple.askconvergent.com/blog/tag/it-strategy) - [Kari's Law (1)](https://simple.askconvergent.com/blog/tag/karis-law) - [Lowest Technology Quote (1)](https://simple.askconvergent.com/blog/tag/lowest-technology-quote) - [POTS line (1)](https://simple.askconvergent.com/blog/tag/pots-line) - [RAY BAUM'S Act (1)](https://simple.askconvergent.com/blog/tag/ray-baums-act) - [Remote Work (1)](https://simple.askconvergent.com/blog/tag/remote-work) - [SD-WAN (1)](https://simple.askconvergent.com/blog/tag/sd-wan) - [Technology Total Cost of Ownership (1)](https://simple.askconvergent.com/blog/tag/technology-total-cost-of-ownership) - [Technology renewal strategy (1)](https://simple.askconvergent.com/blog/tag/technology-renewal-strategy) - [Total Cost of Ownership (1)](https://simple.askconvergent.com/blog/tag/total-cost-of-ownership) - [Unified Communications (1)](https://simple.askconvergent.com/blog/tag/unified-communications) - [Vendor Selection (1)](https://simple.askconvergent.com/blog/tag/vendor-selection) - [WebEx (1)](https://simple.askconvergent.com/blog/tag/webex) - [Zoom (1)](https://simple.askconvergent.com/blog/tag/zoom) - [expedient (1)](https://simple.askconvergent.com/blog/tag/expedient) - [independent technology advisor (1)](https://simple.askconvergent.com/blog/tag/independent-technology-advisor) - [technology strategy (1)](https://simple.askconvergent.com/blog/tag/technology-strategy) - [vendor management (1)](https://simple.askconvergent.com/blog/tag/vendor-management) - [vendor-neutral advisor (1)](https://simple.askconvergent.com/blog/tag/vendor-neutral-advisor) See all ### Recent Articles - - - - ### [ABOUT](https://askconvergent.com/about/) | [CUSTOMER SUPPORT](https://askconvergent.myportallogin.com/) | [RESOURCES](https://simple.askconvergent.com/blog) | [CONTACT US](https://askconvergent.com/contact/) Copyright © | [Privacy Policy](https://askconvergent.com/privacy-policy/)