A new report shows the global average cost of a data breach dropped for the first time in five years — but not in Canada.