Mastercard Cyber Pulse: Middle East Data Breaches Cost 7.29M USD on Average, 64 percent above the global rate.

Mastercard has released its inaugural Cyber Pulse report, the most comprehensive combined threat intelligence view of the Eastern Europe, Middle East, and Africa region published by a major financial institution to date. Released from Riyadh, the report draws on Mastercard’s Cyber Insights platform, RiskRecon’s organisational cyber health assessments, and Recorded Future’s continuous threat analysis capability, which was acquired by Mastercard in December 2024.

The headline figure demands board-level attention across the GCC. The average cost of a data breach in the Middle East stands at 7.29 million USD per incident, according to analysis cited from IBM’s Cost of a Data Breach Report 2025. That figure is 64 percent above the global average, reflecting the concentration of high-value targets, attack sophistication in the region, and structural challenges of breach containment in complex, multi-entity Gulf enterprise environments.

What Is Driving the Threat Landscape

Financially motivated and disruptive threat activity jointly account for 71 percent of observed cybercrime across EEMEA. The adversary profile is not primarily state-sponsored espionage but commercially motivated criminal operations running ransomware, fraud, and business email compromise at industrial scale. Cybercrime across the region increased in early 2026 following a period of geopolitical instability, with the threat environment hardening as economic disruption creates both motivated adversaries and expanded attack surfaces.

The sectors most concentrated in the crosshairs are the public sector, technology, and financial services, which together account for 44 percent of all targeted industry activity across EEMEA. These sectors share three characteristics that make them consistently attractive: high-value data, systemic importance to economic and digital infrastructure, and complex legacy environments that create exploitable gaps between policy and practice.

The Attack Methods That Dominate

Common attack vectors continue to dominate. Malware, ransomware, and email-based social engineering account for the majority of successful intrusions. The report identifies application security and web encryption as the two areas where cyber health gaps are most consistently observed via RiskRecon’s internet-facing asset assessments. These are not advanced problems. Misconfigured web applications, expired certificates, and inadequate input validation are still enabling breaches at scale.

For GCC organisations in regulated sectors, the practical takeaway is clear: the threat is financially motivated, arrives primarily through email and application vulnerabilities, and the cost of being unprepared in this region is 64 percent higher than the global average. The Saudi NCA’s draft mandatory incident reporting framework, open for consultation until 10 July 2026, makes closing these gaps a compliance obligation as well as a commercial imperative.