Skip to main content
VendorsIdentity Theft Resource Center

Identity Theft Resource Center

Cybersecurity reports and statistics published by Identity Theft Resource Center

8 categories7 reports

Recent Statistics & Reports

Publicly traded companies represented only 7% (221 companies) of all compromised organisations, but issued 76% of victim notices in 2024

1/1/2025

Six "mega-breaches" accounted for more than 1.4 billion of the 1.7 billion victim notices issued in 2024.

1/1/2025

Of the 133 cyberattacks against publicly traded companies resulting in a data breach notice, a stolen credential was the leading attack vector.

1/1/2025

Approximately 70% of cyberattack-related breach notices did not include attack information in 2024, compared to 58% in 20232. In 2019 and prior years, nearly 100% of breach notices included attack vector information.

1/1/2025

At least 196 compromises and more than 1.2 billion victim notices could have been prevented with better cyber practices.

1/1/2025

Data compromises in the U.S. in 2024 decreased by 1% compared to 2023, with 3,158 compromises in 2024 and 3,202 in 2023.

1/1/2025

New Securities and Exchange Commission breach disclosure rules resulted in a 60% increase in disclosures in 2024, however, less than 10% of the notices included details of the event.

1/1/2025

Supply chain attacks directly impacted 134 organizations and indirectly impacted 657 entities, resulting in 203 million victim notices. At least 190 million notices were related to the Change Healthcare breach.

1/1/2025

Stolen credentials were the leading attack vector in 133 cyberattacks against publicly traded companies.

1/1/2025

The number of data breach notices issued in 2024 increased by 312% compared to 2023, rising from 419,337,446 to 1,728,519,397.

1/1/2025

Publicly traded companies represented only 7% (221 companies) of all compromised organizations but issued 76% of victim notices in 2024.

1/1/2025

40% of states have enacted comprehensive privacy laws to better protect consumers.

1/1/2025

Better cyber practices and requirements could have prevented at least 196 compromises and more than 1.2 billion victim notices.

1/1/2025

Showing 81-93 of 93 results