Report by DTEX
Cost of Insider Risks Global Report
Key Findings
The average annual cost of insider risk reached $19.5 million in 2025, up 20% over two years.
Organizations took an average of 67 days to contain an insider incident, down from 86 days in 2023.
Organizations experienced an average of 25 insider incidents in 2025.
64% increased insider risk budgets in 2025, yet 45% still view funding as insufficient.
Negligence drove the highest losses, with costs reaching $10.3 million annually – a 17% year-over-year increase.
92% of organizations say generative AI has fundamentally changed how employees access and share information
Insider risk containment represents the largest cost driver at $247,587 per incident, far exceeding escalation costs of $39,728.
Identity management and behavioral intelligence delivered the largest breach cost savings, reducing insider risk costs by $6.1 million and $5.1 million per year, respectively.
63% of organizations now run a dedicated insider risk program.
Just 18% have fully integrated AI governance into their insider risk programs.
44% believe malicious use of AI agents will significantly or moderately increase data theft risk.
Organizations with established insider risk programs prevented at least seven insider incidents per year, avoiding approximately $8.2 million in breach-related costs.
Insider incidents contained within 30 days cost $14.2 million annually, compared with $21.9 million when containment exceeds 90 days.
70% expect insider risk budgets to rise again in 2026, with 28% anticipating increases of 10% or more.
Only 13% of organizations have formally integrated AI into business strategies.
73% worry unauthorized AI use is creating invisible data exfiltration paths.
Only 19% of organizations classify AI agents as equivalent to human insiders.