The number of victim notices in 2025 (278,827,933) is the lowest number of victim notices since 2014 and the lowest number since the last U.S. state and territories adopted data breach laws in 2018 (2025)

Eighty percent of the 1,040 consumers surveyed by the Identity Theft Resource Center report having received a data breach notice in the last 12 months (2025)

The number of data compromises in 2025 (3,322) increases by five percentage points compared to 2024 (3,152) (2025)

The number of victim notices in 2025 is 278,827,933, a decrease of 79 percentage points from 2024 (1,367,117,021) (2025)

Nearly 40 percent of the 1,040 consumers surveyed received three to five separate data breach notices in the past 12 months (2025)

Data compromises in 2025 represent a 79 percent jump over five years (2025)

The Identity Theft Resource Center sets a new record with 3,322 data compromises in 2025, up four percentage points from the previous all-time high in 2023 (3,202) (2025)

The Identity Theft Resource Center tracks 3,322 data compromises in 2025 (2025)

Seventy percent (2,324) of data breach notices in 2025 do not include attack information, compared to 65 percent (2,049) in 2024 and 45 percent (1,449) in 2023 (2023–2025)

In 2025, 55% of Chief Information Security Officers (CISOs) in the US and UK reported that their organization experienced a cyberattack, ransomware infection, compromise, or data breach that rendered mobile, remote, or hybrid endpoint devices inoperable.

Over 85% of New Yorkers indicated they would (41.8%) or might (43.7%) stop using a company if it suffered a data breach.

Organizations classified as 'Exceptional' in AppSec maturity are 1.9 times less likely to experience a data breach than Emerging programs.

Between 2019 and 2023, retail experienced large losses primarily from ransomware (50.0%), followed by other causes (30.0%) and data breaches (20.0%).

Over the past four months, data breaches surged by 235%.

Unauthorized access accounted for nearly 78% of all reported data breach incidents

Application-layer attacks account for 43% of breaches.