58% of UK organizations cite preventing data breaches as the primary reason for data sovereignty efforts.

71% of technology executives rate publicly disclosing a data breach as very or prohibitively disruptive, up from 23% in 2024.

59% of Americans aged 35 to 44 are concerned about data breaches.

The financial sector was the second-most expensive industry for data breaches, at $5.56 million per breach.

In 2025, 90% of breaches affecting financial institutions were financially motivated.

In 2025, data breaches accounted for 64% of security incidents affecting financial institutions.

Human error contributes to 28% of breaches.

In 2025 breach data, AI platforms and tooling accounted for 15% of API-related breaches, tying software as the largest category in the dataset.

75% of consumers who experienced a data breach changed their behavior, compared to 36% of consumers who have not experienced a data breach.

57% of consumers say their personal information has been compromised at least once.

The Identity Theft Resource Center tracks 3,322 data compromises in 2025 (2025)

The number of victim notices in 2025 is 278,827,933, a decrease of 79 percentage points from 2024 (1,367,117,021) (2025)

Data compromises in 2025 represent a 79 percent jump over five years (2025)

Seventy percent (2,324) of data breach notices in 2025 do not include attack information, compared to 65 percent (2,049) in 2024 and 45 percent (1,449) in 2023 (2023–2025)

The Identity Theft Resource Center sets a new record with 3,322 data compromises in 2025, up four percentage points from the previous all-time high in 2023 (3,202) (2025)

The number of victim notices in 2025 (278,827,933) is the lowest number of victim notices since 2014 and the lowest number since the last U.S. state and territories adopted data breach laws in 2018 (2025)

Eighty percent of the 1,040 consumers surveyed by the Identity Theft Resource Center report having received a data breach notice in the last 12 months (2025)

The number of data compromises in 2025 (3,322) increases by five percentage points compared to 2024 (3,152) (2025)

Nearly 40 percent of the 1,040 consumers surveyed received three to five separate data breach notices in the past 12 months (2025)

In 2025, 55% of Chief Information Security Officers (CISOs) in the US and UK reported that their organization experienced a cyberattack, ransomware infection, compromise, or data breach that rendered mobile, remote, or hybrid endpoint devices inoperable.