90% of global organizations would fall victim to AI-driven cyberattacks

Only one in ten organizations worldwide is adequately prepared to face the cybersecurity challenges posed by the rapid adoption of artificial intelligence (AI), according to the Cyber Resilience State 2025 report published by Accenture (NYSE: ACN).
The study, based on a survey of 2,286 cybersecurity and technology executives from large organizations globally, reveals that 90% of companies are ill-equipped to protect themselves in an increasingly complex digital environment.
Nearly two-thirds (63%) fall within the so-called “Exposed Zone,” characterized by a lack of cohesive cybersecurity strategies and minimal technical capabilities.
This analysis comes from Ariel Goldenstein, Cybersecurity Lead at Accenture Colombia:
“Rising geopolitical tensions, economic volatility, and increasingly complex operational environments, coupled with AI-enhanced attacks, are leaving organizations more vulnerable to cyber risks. This report serves as a wake-up call that cybersecurity can no longer be an afterthought. It must be embedded by design in every AI-driven initiative. Adopting this proactive approach will help secure competitive advantage, strengthen customer loyalty, and transform cybersecurity into a business enabler.”
Threats Outpace Current Defenses.
The research warns that the speed, scale, and sophistication of cyber threats have surged dramatically with the advent of AI, outstripping the defensive capabilities of many organizations.
Seventy-seven percent of companies lack essential data security and artificial intelligence practices necessary to protect business models, data flows, and cloud infrastructures.
Despite enthusiasm around generative AI, only 22% of organizations have established clear policies and training programs for its use.
Moreover, few maintain a comprehensive inventory of AI systems, which is critical for mitigating supply chain risks.
Data protection is also limited: only a quarter (25%) fully implement encryption methods and access controls over sensitive information.
Latin America Among the Most Vulnerable.
Regarding cybersecurity maturity by region, Latin America stands out as one of the most vulnerable, with 77% of its organizations in the “Exposed Zone.”
In Asia-Pacific, this figure reaches 71%, while only 14% of North American and 11% of European companies demonstrate mature cybersecurity postures. The report classifies organizations into three maturity zones based on their strategy and technical capabilities.
At the top is the “Ready for Reinvention Zone,” comprising just 10% of companies. This group exhibits resilient and adaptable security postures, capable of evolving in response to emerging threats.
Next is the “Progressing Zone,” encompassing 27% of organizations that, while having developed some defenses, still face challenges in consolidating a clear strategic direction.
Organizations most advanced in cybersecurity — those in the “Ready for Reinvention Zone” — are 69% less likely to suffer sophisticated cyberattacks.
Additionally, they are 1.5 times more effective at blocking threats, have 1.3 times greater visibility into their IT and OT environments, have reduced technical debt by 8%, and report a 15% increase in customer trust.

