{
  "title": "Data Breach Statistics 2026: Breaches per Year, Costs, Causes and Industries",
  "url": "https://statisticsglobal.org/data-breach-statistics/",
  "updated": "2026-11-04",
  "licence": "https://statisticsglobal.org/data-licence/",
  "attribution": "Source: [publisher] via StatisticsGlobal (https://statisticsglobal.org/data-breach-statistics/)",
  "statistics": [
    {
      "id": "db-us-itrc-compromises-h1-2026",
      "sentence": "The US recorded 1,803 data compromises in the first half of 2026, up 3.3% on the first half of 2025, according to the Identity Theft Resource Center.",
      "value": 1803,
      "unit": "compromises",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-compromises-h1-2026"
    },
    {
      "id": "db-us-itrc-notices-h1-vs-2025",
      "sentence": "US victim notices in H1 2026 were already 158% of the full-year 2025 total, calculated by StatisticsGlobal from Identity Theft Resource Center data.",
      "value": 158.4,
      "unit": "%",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "471,206,085 victim notices in H1 2026 divided by 297,539,178 in full-year 2025 = 1.584, or 158.4%. Both totals from the ITRC 2026 H1 report table.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-notices-h1-vs-2025"
    },
    {
      "id": "db-ww-ibm-cost-2026",
      "sentence": "The global average cost of a data breach was a record $4.99 million in 2026, up 12% on the year before, according to IBM.",
      "value": 4.99,
      "unit": "million USD",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "IBM",
      "source_title": "Cost of a Data Breach Report 2026",
      "source_url": "https://www.ibm.com/reports/data-breach",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261028121221/https://www.ibm.com/reports/data-breach",
      "sample": "602 organisations worldwide that had a data breach between March 2025 and February 2026. Research conducted by Ponemon Institute, sponsored and analysed by IBM.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-ibm-cost-2026"
    },
    {
      "id": "cy-ww-dbir-vuln-2026",
      "sentence": "Vulnerability exploitation was the top initial access vector at 31% of breaches in the 2026 report, ahead of credential abuse at 13%, according to Verizon.",
      "value": 31,
      "unit": "%",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "Verizon",
      "source_title": "2026 Data Breach Investigations Report, Executive Summary",
      "source_url": "https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "source_published": "2026, accessed 19 October 2026",
      "archive_url": "https://web.archive.org/web/20261012230115/https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "sample": "More than 31,000 security incidents, of which more than 22,000 confirmed data breaches, contributed by Verizon and partner organisations. Dataset covers October 2024 to November 2025. Worldwide.",
      "method": "",
      "verified_on": "2026-10-19",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-cy-ww-dbir-vuln-2026"
    },
    {
      "id": "db-us-hhs-breaches-2025",
      "sentence": "810 HIPAA breaches affecting 500 or more people were reported to HHS in 2025, affecting 141.2 million individuals, counted by StatisticsGlobal from HHS OCR data.",
      "value": 810,
      "unit": "breaches",
      "place": "United States",
      "data_year": "2025",
      "source_type": "Our analysis",
      "publisher": "US Department of Health and Human Services, Office for Civil Rights",
      "source_title": "Breach Portal: Breaches of Unsecured Protected Health Information (under investigation and archive tabs)",
      "source_url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf",
      "source_published": "Rolling list, latest submission 9 October 2026, exported 4 November 2026",
      "archive_url": "https://statisticsglobal.org/data/snapshots/hhs/ocr-breach-portal-2026-11-04.csv",
      "sample": "HIPAA breaches affecting 500 or more individuals reported to HHS OCR, as listed on the portal on 4 November 2026 (8,072 reports in both tabs). Year is the breach submission date. Counts can change as OCR adds or edits reports.",
      "method": "Counted by StatisticsGlobal from the HHS OCR breach portal CSV exports (under investigation and archive tabs) on 4 November 2026, grouped by breach submission date. 2025: 810 reports, 141,248,514 individuals affected.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-hhs-breaches-2025"
    },
    {
      "id": "db-us-itrc-compromises-2025",
      "sentence": "The US had a record 3,321 publicly reported data compromises in 2025, according to the Identity Theft Resource Center.",
      "value": 3321,
      "unit": "compromises",
      "place": "United States",
      "data_year": "2025",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-compromises-2025"
    },
    {
      "id": "db-us-itrc-q2-2026",
      "sentence": "The US recorded 1,029 data compromises in Q2 2026, the second-highest quarter in ITRC tracking history, according to the Identity Theft Resource Center.",
      "value": 1029,
      "unit": "compromises",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-q2-2026"
    },
    {
      "id": "db-us-itrc-annualised-2026",
      "sentence": "At the H1 pace, US data compromises would reach about 3,606 in 2026, 8.6% above the 2025 record, calculated by StatisticsGlobal from Identity Theft Resource Center data.",
      "value": 8.6,
      "unit": "%",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "1,803 compromises in H1 2026 x 2 = 3,606. 3,606 / 3,321 (2025) - 1 = 8.6%. A simple run rate, not a forecast.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-annualised-2026"
    },
    {
      "id": "db-us-itrc-growth-2021-2025",
      "sentence": "US data compromises rose 78.6% from 1,859 in 2021 to 3,321 in 2025, calculated by StatisticsGlobal from Identity Theft Resource Center data.",
      "value": 78.6,
      "unit": "%",
      "place": "United States",
      "data_year": "2025",
      "source_type": "Our analysis",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "3,321 (2025) / 1,859 (2021) - 1 = 78.6%. Figures from the ITRC 2026 H1 report table. ITRC states the rise as 79% using its earlier 2025 count of 3,322.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-growth-2021-2025"
    },
    {
      "id": "db-us-itrc-q1-to-q2-2026",
      "sentence": "US data compromises rose 33% from 774 in Q1 2026 to 1,029 in Q2 2026, calculated by StatisticsGlobal from Identity Theft Resource Center data.",
      "value": 33,
      "unit": "%",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "1,029 (Q2 2026) / 774 (Q1 2026) - 1 = 32.9%. ITRC says second quarters tend to outpace the first.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-q1-to-q2-2026"
    },
    {
      "id": "db-us-itrc-notices-2025",
      "sentence": "Data compromises in the US produced 297.5 million victim notices in 2025, according to the Identity Theft Resource Center.",
      "value": 297.5,
      "unit": "million victim notices",
      "place": "United States",
      "data_year": "2025",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-notices-2025"
    },
    {
      "id": "db-us-itrc-notices-2024",
      "sentence": "US data compromises produced 1.37 billion victim notices in 2024, according to the Identity Theft Resource Center.",
      "value": 1367.2,
      "unit": "million victim notices",
      "place": "United States",
      "data_year": "2024",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-notices-2024"
    },
    {
      "id": "db-us-itrc-notices-h1-2026",
      "sentence": "Data compromises in the US produced 471.2 million victim notices in the first half of 2026, according to the Identity Theft Resource Center.",
      "value": 471.2,
      "unit": "million victim notices",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-notices-h1-2026"
    },
    {
      "id": "db-us-itrc-canvas-2026",
      "sentence": "The Canvas education platform breach produced an estimated 275 million victim notices in H1 2026, 58% of the US total, according to the Identity Theft Resource Center.",
      "value": 275,
      "unit": "million victim notices",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-canvas-2026"
    },
    {
      "id": "db-us-itrc-notices-per-compromise",
      "sentence": "US data compromises averaged about 261,000 victim notices each in H1 2026, against about 90,000 in 2025, calculated by StatisticsGlobal from Identity Theft Resource Center data.",
      "value": 261346,
      "unit": "victim notices per compromise",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "471,206,085 notices / 1,803 compromises = 261,346 (H1 2026). 297,539,178 / 3,321 = 89,593 (2025). Averages are pulled up by a few very large breaches.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-notices-per-compromise"
    },
    {
      "id": "db-us-itrc-excl-canvas-h1-2026",
      "sentence": "Without the Canvas breach, US victim notices in H1 2026 were about 196.2 million, 66% of the 2025 total, calculated by StatisticsGlobal from Identity Theft Resource Center data.",
      "value": 196.2,
      "unit": "million victim notices",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "471,206,085 total H1 2026 notices - 275,000,000 estimated Canvas notices = 196,206,085. Divided by 297,539,178 (2025) = 65.9%.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-excl-canvas-h1-2026"
    },
    {
      "id": "db-ww-ibm-ai-enabled-2026",
      "sentence": "One in four malicious breaches was AI-enabled in IBM’s 2026 study, and these breaches cost an average of $6 million, according to IBM.",
      "value": 6,
      "unit": "million USD",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "IBM",
      "source_title": "IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Cost of a Data Breach Report 2026 press release)",
      "source_url": "https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "source_published": "29 July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261019020549/https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "sample": "602 organisations worldwide that had a data breach between March 2025 and February 2026. Research conducted by Ponemon Institute, sponsored and analysed by IBM.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-ibm-ai-enabled-2026"
    },
    {
      "id": "db-ww-ibm-ai-premium-2026",
      "sentence": "AI-enabled breaches cost 20.2% more than the average breach in 2026, about $1 million extra, calculated by StatisticsGlobal from IBM data.",
      "value": 20.2,
      "unit": "%",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "IBM",
      "source_title": "IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Cost of a Data Breach Report 2026 press release)",
      "source_url": "https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "source_published": "29 July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261019020549/https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "sample": "602 organisations worldwide that had a data breach between March 2025 and February 2026. Research conducted by Ponemon Institute, sponsored and analysed by IBM.",
      "method": "$6.0 million average AI-enabled breach cost / $4.99 million global average - 1 = 20.2%. $6.0m - $4.99m = $1.01m.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-ibm-ai-premium-2026"
    },
    {
      "id": "db-ww-ibm-finserv-2026",
      "sentence": "Financial services breaches cost an average of $6.3 million in 2026, according to IBM.",
      "value": 6.3,
      "unit": "million USD",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "IBM",
      "source_title": "IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Cost of a Data Breach Report 2026 press release)",
      "source_url": "https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "source_published": "29 July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261019020549/https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "sample": "602 organisations worldwide that had a data breach between March 2025 and February 2026. Research conducted by Ponemon Institute, sponsored and analysed by IBM.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-ibm-finserv-2026"
    },
    {
      "id": "db-ww-ibm-finserv-premium-2026",
      "sentence": "Financial services breaches cost 26.3% more than the global average in 2026, calculated by StatisticsGlobal from IBM data.",
      "value": 26.3,
      "unit": "%",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "IBM",
      "source_title": "IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Cost of a Data Breach Report 2026 press release)",
      "source_url": "https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "source_published": "29 July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261019020549/https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "sample": "602 organisations worldwide that had a data breach between March 2025 and February 2026. Research conducted by Ponemon Institute, sponsored and analysed by IBM.",
      "method": "$6.3 million financial services average / $4.99 million global average - 1 = 26.3%. Energy: $5.2m / $4.99m - 1 = 4.2%.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-ibm-finserv-premium-2026"
    },
    {
      "id": "db-ww-ibm-energy-2026",
      "sentence": "Energy sector breaches cost an average of $5.2 million in 2026, according to IBM.",
      "value": 5.2,
      "unit": "million USD",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "IBM",
      "source_title": "IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Cost of a Data Breach Report 2026 press release)",
      "source_url": "https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "source_published": "29 July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261019020549/https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "sample": "602 organisations worldwide that had a data breach between March 2025 and February 2026. Research conducted by Ponemon Institute, sponsored and analysed by IBM.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-ibm-energy-2026"
    },
    {
      "id": "db-ww-ibm-ai-savings-2026",
      "sentence": "Extensive use of AI and automation in security cut breach costs by $1.93 million in 2026, compared with organisations using none, according to IBM.",
      "value": 1.93,
      "unit": "million USD",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "IBM",
      "source_title": "Cost of a Data Breach Report 2026",
      "source_url": "https://www.ibm.com/reports/data-breach",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261028121221/https://www.ibm.com/reports/data-breach",
      "sample": "602 organisations worldwide that had a data breach between March 2025 and February 2026. Research conducted by Ponemon Institute, sponsored and analysed by IBM.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-ibm-ai-savings-2026"
    },
    {
      "id": "db-ww-ibm-ai-savings-share-2026",
      "sentence": "The $1.93 million AI and automation saving equals 38.7% of the global average breach cost in 2026, calculated by StatisticsGlobal from IBM data.",
      "value": 38.7,
      "unit": "%",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "IBM",
      "source_title": "Cost of a Data Breach Report 2026",
      "source_url": "https://www.ibm.com/reports/data-breach",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261028121221/https://www.ibm.com/reports/data-breach",
      "sample": "602 organisations worldwide that had a data breach between March 2025 and February 2026. Research conducted by Ponemon Institute, sponsored and analysed by IBM.",
      "method": "$1.93 million saving (extensive AI and automation use vs none) / $4.99 million global average = 38.7%. The two figures come from different groups of companies, so this is a scale comparison only.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-ibm-ai-savings-share-2026"
    },
    {
      "id": "db-ww-ibm-encryption-2026",
      "sentence": "Only 37% of breached organisations encrypted sensitive data both at rest and in transit in 2026, according to IBM.",
      "value": 37,
      "unit": "%",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "IBM",
      "source_title": "IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Cost of a Data Breach Report 2026 press release)",
      "source_url": "https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "source_published": "29 July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261019020549/https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "sample": "602 organisations worldwide that had a data breach between March 2025 and February 2026. Research conducted by Ponemon Institute, sponsored and analysed by IBM.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-ibm-encryption-2026"
    },
    {
      "id": "db-ww-ibm-ai-target-2026",
      "sentence": "More than 20% of organisations reported a breach targeting AI models or applications in IBM’s 2026 study, according to IBM.",
      "value": 20,
      "unit": "%",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "IBM",
      "source_title": "IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Cost of a Data Breach Report 2026 press release)",
      "source_url": "https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "source_published": "29 July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261019020549/https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "sample": "602 organisations worldwide that had a data breach between March 2025 and February 2026. Research conducted by Ponemon Institute, sponsored and analysed by IBM.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-ibm-ai-target-2026"
    },
    {
      "id": "cy-ww-dbir-breaches-2026",
      "sentence": "Verizon analysed more than 31,000 incidents and more than 22,000 confirmed data breaches for its 2026 report, according to Verizon.",
      "value": 22000,
      "unit": "breaches",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "Verizon",
      "source_title": "2026 Data Breach Investigations Report, Executive Summary",
      "source_url": "https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "source_published": "2026, accessed 19 October 2026",
      "archive_url": "https://web.archive.org/web/20261012230115/https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "sample": "More than 31,000 security incidents, of which more than 22,000 confirmed data breaches, contributed by Verizon and partner organisations. Dataset covers October 2024 to November 2025. Worldwide.",
      "method": "",
      "verified_on": "2026-10-19",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-cy-ww-dbir-breaches-2026"
    },
    {
      "id": "db-ww-dbir-system-intrusion-2026",
      "sentence": "System Intrusion made up 61% of breaches in the 2026 report, up from 53% in 2025, according to Verizon.",
      "value": 61,
      "unit": "%",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "Verizon",
      "source_title": "2026 Data Breach Investigations Report, Executive Summary",
      "source_url": "https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "source_published": "2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261012230115/https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "sample": "More than 31,000 security incidents, of which more than 22,000 confirmed data breaches, contributed by Verizon and partner organisations. Dataset covers October 2024 to November 2025. Worldwide.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-dbir-system-intrusion-2026"
    },
    {
      "id": "cy-ww-dbir-third-party-2026",
      "sentence": "Third parties were involved in 48% of breaches in the 2026 report, up 60% on the year before, according to Verizon.",
      "value": 48,
      "unit": "%",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "Verizon",
      "source_title": "2026 Data Breach Investigations Report, Executive Summary",
      "source_url": "https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "source_published": "2026, accessed 19 October 2026",
      "archive_url": "https://web.archive.org/web/20261012230115/https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "sample": "More than 31,000 security incidents, of which more than 22,000 confirmed data breaches, contributed by Verizon and partner organisations. Dataset covers October 2024 to November 2025. Worldwide.",
      "method": "",
      "verified_on": "2026-10-19",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-cy-ww-dbir-third-party-2026"
    },
    {
      "id": "cy-ww-dbir-human-2026",
      "sentence": "A human element was present in 62% of breaches in the 2026 report, up from 60%, according to Verizon.",
      "value": 62,
      "unit": "%",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "Verizon",
      "source_title": "2026 Data Breach Investigations Report, Executive Summary",
      "source_url": "https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "source_published": "2026, accessed 19 October 2026",
      "archive_url": "https://web.archive.org/web/20261012230115/https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "sample": "More than 31,000 security incidents, of which more than 22,000 confirmed data breaches, contributed by Verizon and partner organisations. Dataset covers October 2024 to November 2025. Worldwide.",
      "method": "",
      "verified_on": "2026-10-19",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-cy-ww-dbir-human-2026"
    },
    {
      "id": "db-ww-dbir-ransom-median-2026",
      "sentence": "The median ransom paid fell to $139,875 in the 2026 report from $150,000, and 69% of ransomware victims did not pay, according to Verizon.",
      "value": 139875,
      "unit": "USD",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "Verizon",
      "source_title": "2026 Data Breach Investigations Report, Executive Summary",
      "source_url": "https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "source_published": "2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261012230115/https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "sample": "More than 31,000 security incidents, of which more than 22,000 confirmed data breaches, contributed by Verizon and partner organisations. Dataset covers October 2024 to November 2025. Worldwide.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-dbir-ransom-median-2026"
    },
    {
      "id": "db-ww-ibm-ransomware-2026",
      "sentence": "Ransomware was reported in 39% of breaches in IBM’s 2026 study, up from 34% the year before, according to IBM.",
      "value": 39,
      "unit": "%",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "IBM",
      "source_title": "IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average (Cost of a Data Breach Report 2026 press release)",
      "source_url": "https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "source_published": "29 July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261019020549/https://newsroom.ibm.com/2026-07-29-ibm-study-one-in-four-malicious-breaches-are-ai-enabled,-costing-companies-6-million-on-average",
      "sample": "602 organisations worldwide that had a data breach between March 2025 and February 2026. Research conducted by Ponemon Institute, sponsored and analysed by IBM.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-ibm-ransomware-2026"
    },
    {
      "id": "db-us-itrc-cyberattacks-h1-2026",
      "sentence": "Cyberattacks caused 1,256 of 1,803 US data compromises in H1 2026 (69.7%) and 92.3% of victim notices, according to the Identity Theft Resource Center.",
      "value": 69.7,
      "unit": "%",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-cyberattacks-h1-2026"
    },
    {
      "id": "db-us-itrc-phishing-h1-2026",
      "sentence": "Phishing, smishing and business email compromise caused 157 US data compromises in H1 2026, down 37.9% from 253 in H1 2025, according to the Identity Theft Resource Center.",
      "value": 157,
      "unit": "compromises",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-phishing-h1-2026"
    },
    {
      "id": "db-us-itrc-ransomware-h1-2026",
      "sentence": "Ransomware caused 76 publicly reported US data compromises in H1 2026, up from 73 in H1 2025, according to the Identity Theft Resource Center.",
      "value": 76,
      "unit": "compromises",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-ransomware-h1-2026"
    },
    {
      "id": "db-us-itrc-insider-h1-2026",
      "sentence": "Insider wrongdoing caused 21 US data compromises in H1 2026, against 3 in all of 2025, according to the Identity Theft Resource Center.",
      "value": 21,
      "unit": "compromises",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-insider-h1-2026"
    },
    {
      "id": "db-us-itrc-zero-day-h1-2026",
      "sentence": "Zero-day attacks caused 14 US data compromises in H1 2026, double the 7 in H1 2025, according to the Identity Theft Resource Center.",
      "value": 14,
      "unit": "compromises",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-zero-day-h1-2026"
    },
    {
      "id": "db-us-itrc-supply-chain-h1-2026",
      "sentence": "Supply chain attacks in H1 2026 came from 38 initial breaches, hit 206 US entities and produced 280.6 million victim notices, according to the Identity Theft Resource Center.",
      "value": 280.6,
      "unit": "million victim notices",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-supply-chain-h1-2026"
    },
    {
      "id": "db-us-itrc-supply-chain-multiplier",
      "sentence": "Each initial supply chain attack in H1 2026 reached an average of 5.4 US entities, calculated by StatisticsGlobal from Identity Theft Resource Center data.",
      "value": 5.4,
      "unit": "entities per attack",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "206 affected entities / 38 initial supply chain breach events = 5.42.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-supply-chain-multiplier"
    },
    {
      "id": "db-us-itrc-no-vector-h1-2026",
      "sentence": "76% of US breach notices in H1 2026 did not say how the breach happened, up from 70% in 2025, according to the Identity Theft Resource Center.",
      "value": 76,
      "unit": "%",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-no-vector-h1-2026"
    },
    {
      "id": "db-us-itrc-financial-h1-2026",
      "sentence": "Financial services had 387 US data compromises in H1 2026, more than any other sector, according to the Identity Theft Resource Center.",
      "value": 387,
      "unit": "compromises",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-financial-h1-2026"
    },
    {
      "id": "db-us-itrc-financial-share-h1-2026",
      "sentence": "Financial services accounted for 21.5% of US data compromises in H1 2026 but 2.8% of victim notices, calculated by StatisticsGlobal from Identity Theft Resource Center data.",
      "value": 21.5,
      "unit": "%",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "387 financial services compromises / 1,803 total = 21.5%. 13,011,106 financial services victim notices / 471,206,085 total = 2.8%.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-financial-share-h1-2026"
    },
    {
      "id": "db-us-itrc-healthcare-h1-2026",
      "sentence": "Healthcare had 281 US data compromises in H1 2026, up from 270 in H1 2025, according to the Identity Theft Resource Center.",
      "value": 281,
      "unit": "compromises",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-healthcare-h1-2026"
    },
    {
      "id": "db-us-itrc-manufacturing-h1-2026",
      "sentence": "Manufacturing data compromises in the US produced 74 million victim notices in H1 2026, against 1.97 million in all of 2025, according to the Identity Theft Resource Center.",
      "value": 74,
      "unit": "million victim notices",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-manufacturing-h1-2026"
    },
    {
      "id": "db-us-itrc-public-cos-h1-2026",
      "sentence": "Publicly traded companies had 10.3% of US data compromises in H1 2026 but 83.4% of victim notices, according to the Identity Theft Resource Center.",
      "value": 83.4,
      "unit": "%",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Research",
      "publisher": "Identity Theft Resource Center (ITRC)",
      "source_title": "2026 H1 Data Breach Report",
      "source_url": "https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "source_published": "July 2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261006163343/https://www.idtheftcenter.org/wp-content/uploads/2026/07/ITRC-H1-2026-Data-Breach-Report.pdf",
      "sample": "Publicly reported US data compromises (breaches, exposures, leaks and unclassified events) tracked by ITRC from breach notices. H1 2026 covers January to June 2026. Victim notice counts can include non-US individuals.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-itrc-public-cos-h1-2026"
    },
    {
      "id": "db-ww-dbir-top-industry-2026",
      "sentence": "Manufacturing had the most confirmed breaches of any industry in the 2026 report, 2,713, ahead of professional services at 2,558, ranked by StatisticsGlobal from Verizon data.",
      "value": 2713,
      "unit": "breaches",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "Verizon",
      "source_title": "2026 Data Breach Investigations Report, Executive Summary",
      "source_url": "https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "source_published": "2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261012230115/https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "sample": "More than 31,000 security incidents, of which more than 22,000 confirmed data breaches, contributed by Verizon and partner organisations. Dataset covers October 2024 to November 2025. Worldwide.",
      "method": "Ranked confirmed breach counts across all industries in the executive summary: Manufacturing 2,713, Professional 2,558, Public Administration 2,410, Healthcare 1,438, Financial and Insurance 1,300, Educational Services 1,252. Small and medium-sized businesses (7,152) is a size group, not an industry.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-dbir-top-industry-2026"
    },
    {
      "id": "db-ww-dbir-smb-2026",
      "sentence": "Small and medium-sized businesses had 7,152 confirmed data breaches from 7,256 incidents in the 2026 report, according to Verizon.",
      "value": 7152,
      "unit": "breaches",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "Verizon",
      "source_title": "2026 Data Breach Investigations Report, Executive Summary",
      "source_url": "https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "source_published": "2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261012230115/https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "sample": "More than 31,000 security incidents, of which more than 22,000 confirmed data breaches, contributed by Verizon and partner organisations. Dataset covers October 2024 to November 2025. Worldwide.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-dbir-smb-2026"
    },
    {
      "id": "db-ww-dbir-na-2026",
      "sentence": "Northern America had 12,371 incidents and 8,426 confirmed data breaches in the 2026 report, according to Verizon.",
      "value": 8426,
      "unit": "breaches",
      "place": "Northern America",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "Verizon",
      "source_title": "2026 Data Breach Investigations Report, Executive Summary",
      "source_url": "https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "source_published": "2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261012230115/https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "sample": "More than 31,000 security incidents, of which more than 22,000 confirmed data breaches, contributed by Verizon and partner organisations. Dataset covers October 2024 to November 2025. Worldwide.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-dbir-na-2026"
    },
    {
      "id": "db-ww-dbir-na-share-2026",
      "sentence": "Northern America accounted for 46.7% of confirmed breaches with a region in the 2026 report, calculated by StatisticsGlobal from Verizon data.",
      "value": 46.7,
      "unit": "%",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "Verizon",
      "source_title": "2026 Data Breach Investigations Report, Executive Summary",
      "source_url": "https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "source_published": "2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261012230115/https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "sample": "More than 31,000 security incidents, of which more than 22,000 confirmed data breaches, contributed by Verizon and partner organisations. Dataset covers October 2024 to November 2025. Worldwide.",
      "method": "Confirmed breaches by region: Northern America 8,426, EMEA 6,060, APAC 2,855, Latin America and Caribbean 718. Total 18,059. 8,426 / 18,059 = 46.7%. Reflects where Verizon contributors work, not where breaches happen most.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-dbir-na-share-2026"
    },
    {
      "id": "db-us-hhs-breaches-2024",
      "sentence": "741 HIPAA breaches affecting 500 or more people were reported to HHS in 2024, affecting 290.1 million individuals, counted by StatisticsGlobal from HHS OCR data.",
      "value": 741,
      "unit": "breaches",
      "place": "United States",
      "data_year": "2024",
      "source_type": "Our analysis",
      "publisher": "US Department of Health and Human Services, Office for Civil Rights",
      "source_title": "Breach Portal: Breaches of Unsecured Protected Health Information (under investigation and archive tabs)",
      "source_url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf",
      "source_published": "Rolling list, latest submission 9 October 2026, exported 4 November 2026",
      "archive_url": "https://statisticsglobal.org/data/snapshots/hhs/ocr-breach-portal-2026-11-04.csv",
      "sample": "HIPAA breaches affecting 500 or more individuals reported to HHS OCR, as listed on the portal on 4 November 2026 (8,072 reports in both tabs). Year is the breach submission date. Counts can change as OCR adds or edits reports.",
      "method": "Counted by StatisticsGlobal from the HHS OCR breach portal CSV exports (under investigation and archive tabs) on 4 November 2026, grouped by breach submission date. 2024: 741 reports, 290,052,596 individuals affected. Totals add reported counts, so one person in several breaches is counted more than once.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-hhs-breaches-2024"
    },
    {
      "id": "db-us-hhs-change-2025",
      "sentence": "Large HIPAA breach reports rose 9.3% in 2025 while individuals affected fell 51.3%, calculated by StatisticsGlobal from HHS OCR data.",
      "value": 9.3,
      "unit": "%",
      "place": "United States",
      "data_year": "2025",
      "source_type": "Our analysis",
      "publisher": "US Department of Health and Human Services, Office for Civil Rights",
      "source_title": "Breach Portal: Breaches of Unsecured Protected Health Information (under investigation and archive tabs)",
      "source_url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf",
      "source_published": "Rolling list, latest submission 9 October 2026, exported 4 November 2026",
      "archive_url": "https://statisticsglobal.org/data/snapshots/hhs/ocr-breach-portal-2026-11-04.csv",
      "sample": "HIPAA breaches affecting 500 or more individuals reported to HHS OCR, as listed on the portal on 4 November 2026 (8,072 reports in both tabs). Year is the breach submission date. Counts can change as OCR adds or edits reports.",
      "method": "Counted by StatisticsGlobal from the HHS OCR breach portal CSV exports (under investigation and archive tabs) on 4 November 2026, grouped by breach submission date. Reports: 810 (2025) / 741 (2024) - 1 = 9.3%. Individuals: 141,248,514 / 290,052,596 - 1 = -51.3%.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-hhs-change-2025"
    },
    {
      "id": "db-us-hhs-hacking-2025",
      "sentence": "Hacking or IT incidents made up 80.9% of large HIPAA breach reports in 2025 and 95.6% of individuals affected, calculated by StatisticsGlobal from HHS OCR data.",
      "value": 80.9,
      "unit": "%",
      "place": "United States",
      "data_year": "2025",
      "source_type": "Our analysis",
      "publisher": "US Department of Health and Human Services, Office for Civil Rights",
      "source_title": "Breach Portal: Breaches of Unsecured Protected Health Information (under investigation and archive tabs)",
      "source_url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf",
      "source_published": "Rolling list, latest submission 9 October 2026, exported 4 November 2026",
      "archive_url": "https://statisticsglobal.org/data/snapshots/hhs/ocr-breach-portal-2026-11-04.csv",
      "sample": "HIPAA breaches affecting 500 or more individuals reported to HHS OCR, as listed on the portal on 4 November 2026 (8,072 reports in both tabs). Year is the breach submission date. Counts can change as OCR adds or edits reports.",
      "method": "Counted by StatisticsGlobal from the HHS OCR breach portal CSV exports (under investigation and archive tabs) on 4 November 2026, grouped by breach submission date. Type of breach \"Hacking/IT Incident\": 655 of 810 reports = 80.9%; 135,049,969 of 141,248,514 individuals = 95.6%.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-hhs-hacking-2025"
    },
    {
      "id": "db-us-hhs-ba-2025",
      "sentence": "A business associate was involved in 35.1% of large HIPAA breaches in 2025 and 63.8% of individuals affected, calculated by StatisticsGlobal from HHS OCR data.",
      "value": 35.1,
      "unit": "%",
      "place": "United States",
      "data_year": "2025",
      "source_type": "Our analysis",
      "publisher": "US Department of Health and Human Services, Office for Civil Rights",
      "source_title": "Breach Portal: Breaches of Unsecured Protected Health Information (under investigation and archive tabs)",
      "source_url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf",
      "source_published": "Rolling list, latest submission 9 October 2026, exported 4 November 2026",
      "archive_url": "https://statisticsglobal.org/data/snapshots/hhs/ocr-breach-portal-2026-11-04.csv",
      "sample": "HIPAA breaches affecting 500 or more individuals reported to HHS OCR, as listed on the portal on 4 November 2026 (8,072 reports in both tabs). Year is the breach submission date. Counts can change as OCR adds or edits reports.",
      "method": "Counted by StatisticsGlobal from the HHS OCR breach portal CSV exports (under investigation and archive tabs) on 4 November 2026, grouped by breach submission date. \"Business Associate Present\" = Yes: 284 of 810 reports = 35.1%; 90,124,354 of 141,248,514 individuals = 63.8%.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-hhs-ba-2025"
    },
    {
      "id": "db-us-hhs-largest-2025",
      "sentence": "The largest HIPAA breach reported in 2025 affected 62.2 million people, 44.1% of that year’s total, calculated by StatisticsGlobal from HHS OCR data.",
      "value": 62.2,
      "unit": "million individuals",
      "place": "United States",
      "data_year": "2025",
      "source_type": "Our analysis",
      "publisher": "US Department of Health and Human Services, Office for Civil Rights",
      "source_title": "Breach Portal: Breaches of Unsecured Protected Health Information (under investigation and archive tabs)",
      "source_url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf",
      "source_published": "Rolling list, latest submission 9 October 2026, exported 4 November 2026",
      "archive_url": "https://statisticsglobal.org/data/snapshots/hhs/ocr-breach-portal-2026-11-04.csv",
      "sample": "HIPAA breaches affecting 500 or more individuals reported to HHS OCR, as listed on the portal on 4 November 2026 (8,072 reports in both tabs). Year is the breach submission date. Counts can change as OCR adds or edits reports.",
      "method": "Counted by StatisticsGlobal from the HHS OCR breach portal CSV exports (under investigation and archive tabs) on 4 November 2026, grouped by breach submission date. Largest 2025 report: Conduent Business Services LLC (business associate), 62,224,658 individuals, submitted 8 October 2025. 62,224,658 / 141,248,514 = 44.1%.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-hhs-largest-2025"
    },
    {
      "id": "db-us-hhs-1m-2025",
      "sentence": "16 HIPAA breaches reported in 2025 affected one million people or more each, counted by StatisticsGlobal from HHS OCR data.",
      "value": 16,
      "unit": "breaches",
      "place": "United States",
      "data_year": "2025",
      "source_type": "Our analysis",
      "publisher": "US Department of Health and Human Services, Office for Civil Rights",
      "source_title": "Breach Portal: Breaches of Unsecured Protected Health Information (under investigation and archive tabs)",
      "source_url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf",
      "source_published": "Rolling list, latest submission 9 October 2026, exported 4 November 2026",
      "archive_url": "https://statisticsglobal.org/data/snapshots/hhs/ocr-breach-portal-2026-11-04.csv",
      "sample": "HIPAA breaches affecting 500 or more individuals reported to HHS OCR, as listed on the portal on 4 November 2026 (8,072 reports in both tabs). Year is the breach submission date. Counts can change as OCR adds or edits reports.",
      "method": "Counted by StatisticsGlobal from the HHS OCR breach portal CSV exports (under investigation and archive tabs) on 4 November 2026, grouped by breach submission date. Reports with individuals affected of 1,000,000 or more, submission year 2025: 16. Also 16 so far in 2026 to 9 October.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-hhs-1m-2025"
    },
    {
      "id": "db-us-hhs-ytd-2026",
      "sentence": "600 large HIPAA breaches were reported to HHS from January to September 2026, 5.2% fewer than a year earlier, calculated by StatisticsGlobal from HHS OCR data.",
      "value": 600,
      "unit": "breaches",
      "place": "United States",
      "data_year": "2026",
      "source_type": "Our analysis",
      "publisher": "US Department of Health and Human Services, Office for Civil Rights",
      "source_title": "Breach Portal: Breaches of Unsecured Protected Health Information (under investigation and archive tabs)",
      "source_url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf",
      "source_published": "Rolling list, latest submission 9 October 2026, exported 4 November 2026",
      "archive_url": "https://statisticsglobal.org/data/snapshots/hhs/ocr-breach-portal-2026-11-04.csv",
      "sample": "HIPAA breaches affecting 500 or more individuals reported to HHS OCR, as listed on the portal on 4 November 2026 (8,072 reports in both tabs). Year is the breach submission date. Counts can change as OCR adds or edits reports.",
      "method": "Counted by StatisticsGlobal from the HHS OCR breach portal CSV exports (under investigation and archive tabs) on 4 November 2026, grouped by breach submission date. January to September 2026: 600 reports, 79,153,694 individuals. January to September 2025: 633 reports, 74,088,450 individuals. Reports -5.2%, individuals +6.8%.",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-us-hhs-ytd-2026"
    },
    {
      "id": "db-ww-dbir-healthcare-2026",
      "sentence": "Healthcare had 1,492 incidents and 1,438 confirmed data breaches in the 2026 report, according to Verizon.",
      "value": 1438,
      "unit": "breaches",
      "place": "Worldwide",
      "data_year": "2026",
      "source_type": "Vendor report",
      "publisher": "Verizon",
      "source_title": "2026 Data Breach Investigations Report, Executive Summary",
      "source_url": "https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "source_published": "2026, accessed 4 November 2026",
      "archive_url": "https://web.archive.org/web/20261012230115/https://www.verizon.com/business/resources/executivebriefs/dbir-2026-executive-summary.pdf",
      "sample": "More than 31,000 security incidents, of which more than 22,000 confirmed data breaches, contributed by Verizon and partner organisations. Dataset covers October 2024 to November 2025. Worldwide.",
      "method": "",
      "verified_on": "2026-11-04",
      "url": "https://statisticsglobal.org/data-breach-statistics/#stat-db-ww-dbir-healthcare-2026"
    }
  ]
}