One-fourth of Indian firms surveyed report cyber losses: PwC report

Nearly a quarter of Indian enterprises surveyed reported losses exceeding USD 1 million (about Rs 8.8 crore) from cyber breaches over the past three years, with the risk particularly high among companies earning USD 5 billion or more in annual revenue.

Cyber budgets are rising, albeit at a cautious pace, with 87 per cent of organisations in India planning to increase their cybersecurity spending over the next 12 months, according to a PwC report.

The PwC 2026 Global Digital Trust Insights survey, based on responses from 138 Indian business and technology executives, found that investment in AI tops budget priorities at 46 per cent, followed by cloud security at 33 per cent.


"...25 per cent of businesses say their most damaging data breach in the past three years cost their organisation at least USD 1 million, with exposure highest among enterprises generating USD 5 billion or more in revenue (45 per cent).

"This year, 87 per cent of leaders of Indian organisations expect their cyber budgets to grow in the coming year, and nearly one-third of them plan to boost spending by more than 10 per cent-a slight dip from last year's 93 per cent, yet a strong signal of sustained investment. Notably, just over one-third (38 per cent) of these said their budgets would likely increase 6-10 per cent," the report noted.

More than half (60 per cent) of security leaders are prioritising AI threat-hunting capabilities, while nearly 47 per cent are focusing on other AI-driven functions such as agentic AI.

Cybersecurity workforce shortages continue to impede progress as organisations operationalise AI, secure complex environments, and prepare for the next generation of threats. Nearly 60 per cent of respondents cited limited expertise in using AI for cyber defence, while 50 per cent flagged insufficient skills as the primary internal obstacle to adopting AI for cybersecurity over the past year.

Despite these challenges, organisations are taking action by prioritising AI and machine learning investments (61 per cent), consolidating security tools (51 per cent), deploying automation solutions (49 per cent), and upskilling or reskilling staff (49 per cent).