CrowdStrike’s 2026 Global Threat Report puts average eCrime breakout time at 29 minutes, down from 48 minutes a year earlier, with AI-augmented attacks up 89 percent year over year. If your incident response plan still assumes hours between initial access and lateral movement, that assumption is now off by roughly two orders of magnitude.