Data Breach Statistics 2026: The Numbers Behind the Record Year
Identity theft starts with exposed data — and in 2025 more of it was exposed than ever before. Here are the data breach statistics that actually matter for 2026, pulled from the organization that tracks U.S. breaches most closely: the Identity Theft Resource Center (ITRC). Every figure is sourced.
The headline numbers
| Metric | Figure | Year | Source |
|---|---|---|---|
| Data compromises tracked | 3,322 (record) | 2025 | ITRC |
| Prior-year compromises | 3,152 | 2024 | ITRC |
| Victim notices issued | 278.8 million | 2025 | ITRC |
| Breaches with no disclosed cause | 70% | 2025 | ITRC |
| People who received a breach notice in the last year | 80% | 2025 | ITRC |
A record 3,322 breaches
The ITRC 2025 Annual Data Breach Report recorded the most data compromises in a single year on record:
| Metric | 2024 | 2025 |
|---|---|---|
| Data compromises | 3,152 | 3,322 (record) |
| Victim notices | ~1.37 billion | 278.8 million |
| Breaches with no disclosed cause | 65% | 70% |
Two numbers need careful reading:
- Victim notices fell — but breaches rose. The drop from ~1.37 billion notices to 278.8 million looks like improvement, but it's an artifact: 2024 included a handful of enormous "mega-breaches" that inflated its total. The number of breach events actually hit an all-time high in 2025.
- Transparency is getting worse. Seven in ten breach notices in 2025 didn't say how the breach happened — up from 65% the year before — leaving victims with less to go on.
Want full protection beyond link checks? Aura monitors threats, blocks phishing & protects your identity — all in one app.
Try Aura Free →Exposure is now close to universal
The most striking figure isn't the breach count — it's the consumer reality behind it. In ITRC's survey, 80% of people said they'd received a data breach notice in the past 12 months.
Combine that with a simple, uncomfortable fact: stolen data doesn't expire. A Social Security number or date of birth exposed in a 2025 breach is just as useful to a criminal in 2028. That's why breach exposure and identity fraud are increasingly disconnected in time — the breach and the fraud can be years apart.
This is the core case for ongoing monitoring rather than one-time cleanup. If you've received a notice, the immediate steps are here: What to Do After a Data Breach. To check whether your information is already circulating, see Has My Personal Information Been Leaked?
From breach to fraud
Breached data is the raw material for the identity crimes that follow. Javelin's 2026 Identity Fraud Study shows where it ends up:
- New-account fraud victims rose 31% year over year, to 5.4 million.
- Account takeover rose 18%, to 6 million victims.
- Combined identity fraud and scams totaled $38 billion across 36 million victims.
In other words, the record breach numbers on this page are the leading indicator; the fraud numbers are the lagging one. For the full downstream picture, see Identity Theft Statistics 2026.
What the data means for you
- Assume you're already exposed. With record breaches and 80% of people notified in a year, "has my data leaked?" is effectively answered — plan around it.
- Freeze what you can. A credit freeze is free and blocks the most damaging outcome (new-account fraud). Here's how to freeze your credit at all 3 bureaus.
- Monitor continuously. Because stolen data resurfaces years later, ongoing credit and dark-web monitoring beats a one-time reaction. Whether it's worth paying for: Do I Need Identity Theft Protection?
RecommendedAward-Winning Online Safety — All in One Place
Aura brings together everything you need to stay safe online — identity monitoring, credit protection, VPN, antivirus, and a password manager — in a single, easy-to-use platform. Ranked best in class by Forbes Advisor, US News, and Money.
$1M
Identity Insurance per adult
3
Credit bureaus monitored
4.6★
Trustpilot rating
24/7
U.S.-based expert support
* Affiliate link. We may earn a commission at no extra cost to you.
Sources & citation
All figures current as of mid-2026:
- Identity Theft Resource Center — 2025 Annual Data Breach Report
- FBI IC3 — 2025 Internet Crime Report
- Javelin — 2026 Identity Fraud Study
Citing these stats? Link back to this page (/statistics/Data-Breach-Statistics-2026) — we keep it current as new reports are released.
Sources & References
Frequently Asked Questions
How many data breaches happened in 2025?
The Identity Theft Resource Center tracked 3,322 data compromises in the U.S. in 2025 — an all-time record, up from 3,152 in 2024. This is the highest number of breaches ever recorded in a single year.
How many people were affected by data breaches in 2025?
ITRC counted roughly 278.8 million victim notices in 2025. That's lower than 2024's ~1.37 billion, but only because 2024 included several 'mega-breaches' that inflated the total — the number of breach events still hit a record high in 2025.
What percentage of data breaches don't disclose a cause?
70% of breach notices in 2025 did not disclose how the breach happened, up from 65% in 2024. This growing lack of transparency leaves affected consumers with less information to protect themselves.
How likely is it that my data has been breached?
Very likely. In ITRC's consumer survey, 80% of people said they had received at least one data breach notice in the previous 12 months. With record breach volumes and stolen data that never expires, the safest assumption is that some of your personal information is already exposed.