Russian credit organizations may spend 43–45 billion rubles on information security in 2026 – 10–15% more than a year earlier, Kommersant writes, citing an assessment by Informzaschita. The money will be used to purchase protection tools, specialized services, and implement and maintain security perimeter solutions.

Medium-sized banks' budgets will see the most significant increase – by 25–35%, up to 7.5–8 billion rubles. The largest ones will add 10–12%, up to 28–29 billion. Small players are likely to keep their expenses at last year's level or increase them by no more than 5%. Priorities are changing: previously, banks spent on import substitution and regulatory requirements; now the focus is on integrating already implemented solutions, improving attack detection, and response.

According to Positive Technologies, in the first half of the year, hacker attacks on the financial sector led to confidential information leaks in 36% of cases, disruption of core activities in 45%, and direct financial losses in 18%. Security expenses cannot be postponed to the next year: infrastructure requires constant monitoring, and the development of digital services and AI only expands the attack surface.