It takes an average of 117 days for a breach to be publicly disclosed after discovery.

The average disclosure window worsened from 76 days in 2024 to 117 days in 2025.

The median disclosure delay after detection is 73 days.