It takes an average of 117 days for a breach to be publicly disclosed after discovery.
| Publisher | Black Kite |
| Report | 2026 Third-Party Breach Report: Managing Risk Concentration in the Era of Cascading Failures |
| Published | 7 March 2026 |
| Topics | Breach Disclosure, Transparency |
Published by Black Kite in 2026 Third-Party Breach Report: Managing Risk Concentration in the Era of Cascading Failures, 7 March 2026. The figure is taken from the report as published; the full methodology is in the source.