Cyber Risk Is Evolving—But the Fundamentals Still Matter

This information comes from BakerHostetler

The 2026 Data Security Incident Response Report from Baker and Hostetler offers a timely look at how cyber threats, data privacy requirements, and incident response are changing. While the report’s title, “The Risk Remains (Mostly) the Same,” suggests that many familiar threats remain, the methods attackers use—and the speed at which incidents unfold—are changing rapidly.

One of the most significant developments is the growing role of artificial intelligence in cyberattacks. The report notes that AI is moving beyond simply improving phishing attempts and is increasingly being used to automate reconnaissance, credential harvesting, network penetration, data theft, and even extortion. AI-enabled attacks can compress the timeline between initial access and significant damage, giving organizations less time to detect and contain an incident.

At the same time, attackers are increasingly stealing data without encrypting systems. In 2025, 43% of organizations that paid a ransom did so primarily to prevent stolen data from being published, compared with 31% that paid primarily to obtain a decryptor. This reflects a broader shift toward data exfiltration and extortion rather than traditional ransomware alone.

Read the full article by clicking the link below:

2026-DSIR-Report.pdf

Download PDF • 4.00MB