mean time to identify and contain a breach in IBM's 2026 Cost of a Data Breach report
247 daysobserved
| Value kind | observed — Reported measurements, counts, and specifications keep the precision and scope stated by their source; an exact specification is not treated as a range. |
|---|---|
| Scope | Identification plus containment; IBM's metric stops at containment and does not include restore. |
| As of | 2026 |
| Source | IBM/Ponemon Cost of a Data Breach 2026 (IBM Think data-breach topic page) · IBM Think, What is a data breach: an average of 247 days to identify and contain an active breach across all industries |
| Review | checking…review by 2027-08-15 · standard cadence |
| Recorded changes | last 2026-10-12 · 2 revisions tracked |
| Claim id | mean-time-to-identify-contain-a-breach-in-2025 |
Where the guide uses it
← Full numbers register — every date-stamped figure in the guide, with revision history.