As of June 2025, the most significant data breach incident in the United States was the Yahoo data breach that dates back to 2013-2016. Impacting over three billion online users, this incident still remains one of the most significant data breaches worldwide. The second-biggest case was the January 2021 data breach at Microsoft, involving about 30 thousand companies in the United States and around 60 thousand companies around the world.

It started with a strange email. The kind you usually ignore. But for one midsize healthcare firm in Ohio, clicking that link changed everything. Within hours, sensitive patient records were encrypted, and hackers demanded payment in cryptocurrency. By the time IT figured out the breach, over 1.4 million records were...

Between January and September 2024, healthcare organizations in the United States saw 491 large-scale data breaches, resulting in the loss of over 500 records. This figure has increased significantly in the last decade. To date, the highest number of large-scale data breaches in the U.S. healthcare sector was recorded in 2023, with a reported 745 cases.

Introduction

Data Breaches Statistics: In recent years, data breaches have emerged as a major threat to both businesses and individuals. As the digital world grows, the frequency, scale, and impact of these breaches have surged, resulting in significant financial, reputational, and legal repercussions for organizations. The number of data breaches hit record highs, compromising millions of sensitive records.

This increase can be attributed to several factors, including rising cybercrime, inadequate data security practices, and the growing sophistication of hacking techniques. Data from cybersecurity experts reveal a notable rise in breaches within the healthcare, financial, and retail industries.

As the fallout from these breaches intensifies, it has become increasingly important for both businesses and consumers to understand the trends and scope of these incidents. This introduction will explore the latest statistics and developments, offering insights into the evolving landscape of data breaches and their wide-reaching effects.

The statistic shows the number of data breaches in the United States from 2013 to 2019, by industry. In the last measured period, the majority of the 1,473 annual data breaches affected business and medical or healthcare organizations, with 644 and 525 data breaches respectively.

Pay attention to the following cybersecurity statistics to learn how to protect yourself from attacks.

As of 2024, the average cost of a data breach in the United States amounted to **** million U.S. dollars, down from **** million U.S. dollars in the previous year. The global average cost per data breach was **** million U.S. dollars in 2024. Cost of a data breach in different countries worldwide Data breaches impose a big threat for organizations globally. The monetary damage caused by data breaches has increased in many markets in the past decade. In 2023, Canada followed the U.S. by data breach costs, with an average of **** million U.S. dollars. Since 2019, the average monetary damage caused by loss of sensitive information in Canada has increased notably. In the United Kingdom, the average cost of a data breach in 2024 amounted to around **** million U.S. dollars, while in Germany it stood at **** million U.S. dollars. The cost of data breach by industry and segment Data breach costs vary depending on the industry and segment. For the fourth consecutive year, the global healthcare sector registered the highest costs of data breach, which in 2024 amounted to about **** million U.S. dollars. Financial institutions ranked second, with an average cost of *** million U.S. dollars for a data breach. Detection and escalation was the costliest segment in data breaches worldwide, with **** U.S. dollars on average. The cost for lost business ranked second, while response following a breach came across as the third-costliest segment.

Between the first quarter of 2021 and the first quarter of 2024, the number of data compromise cases in the United States increased significantly. The highest number of data compromises was recorded in the fourth quarter of 2023, with 1,089 cases. However, the number of recorded cases fell to 841 in the first quarter of 2024. In the fourth quarter of 2022, more than 253 million individuals were affected by data compromise incidents. By the first quarter of 2024, this number decreased to around 28.5 million.

In 2024, numerous data breach incidents were disclosed, causing uncertainty among customers. Some of the incidents have refused to disclose the exact number of individuals impacted, so the impact in these cases is only estimated. The largest data breach is believed to have impacted every American, with around ************* records being breached. A UK-based pathology lab, Synnovis, saw a ransomware attack in July 2024, which impacted approximately *** million patients.

As of February 2025, the United States ranked first by the average cost of a data breach, ***** million U.S. dollars. The average cost of data breaches in the Middle East was **** million U.S. dollars. Benelux followed in the ranking, with **** million U.S. dollars. In the measured period, the global average data breach cost was **** million U.S. dollars. Phishing scams in the U.S. Breached data often ends up in the hands of threat actors who use it for malicious purposes, including online scams. Phishing continues to be a major threat in North America, particularly on smartphones. In the second quarter of 2023, the region recorded the highest number of phishing and malicious attack attempts globally. The United States was particularly affected, with ** percent of U.S. citizens reporting being targeted by scam texts, e-mails, and calls on a daily basis. Additionally, phishing and spoofing were the most common types of cybercrime, impacting *** thousand individuals in 2023. These attacks led to financial losses, with U.S. victims reporting nearly ** billion U.S. dollars in damages throughout the year. U.S. users and data privacy Despite only ** percent of internet users in the United States being highly knowledgeable about data privacy and cybersecurity, a significant portion of users demonstrated caution and awareness in protecting their information. In fact, over half of surveyed U.S. users reported being somewhat confident in knowing the right steps to take in the event of a cyberattack. Furthermore, ** percent of U.S. users actively decline cookies on websites, reflecting their increasing concern for data protection. Many respondents also take additional steps to safeguard their digital privacy, such as limiting or avoiding clicking on ads as well as not answering phone calls due to cybersecurity risks.

Washington law requires entities impacted by a data breach to notify the Attorney General’s Office (AGO) when more than 500 Washingtonians personal information was compromised as a result of the breach. This dataset is a collection of various statistics that have been derived from these notices, and is the source of data used to produce the AGO’s Annual Data Breach Report.

Washington law requires entities impacted by a data breach to notify the Attorney General’s Office (AGO) when more than 500 Washingtonians personal information was compromised as a result of the breach. This dataset breaks out the individual types of breached personal information that were identified in each notice our office received. This data is used to produce the AGO’s Annual Data Breach Report. For additional statistics relating to data breaches, also see the main dataset at: https://data.wa.gov/Consumer-Protection/Data-Breach-Notifications-Affecting-Washington-Res/sb4j-ca4h.

Between November 2023 and October 2024, the manufacturing industry saw 1,032 data breach cases caused by system intrusion. Basic web application attacks resulted in 201 data breaches in the finance sector.

Introduction

Cyber Security Statistics: Cybersecurity has become a top priority for organizations worldwide, driven by the escalating volume and complexity of cyber threats. As businesses increasingly adopt digital technologies, the risk of cyberattacks, such as data breaches, ransomware, and phishing, has risen, creating significant challenges for data privacy and security.

The increasing frequency of high-profile cyber incidents has exposed vulnerabilities in various sectors, prompting governments and organizations to enhance their cybersecurity measures. In response, emerging technologies such as artificial intelligence and machine learning are being integrated to enhance threat detection and response capabilities.

The following statistics offer a comprehensive overview of the cybersecurity landscape, shedding light on the trends, risks, and developments that are shaping this critical field.

Introduction

Data Privacy Statistics: As the digital landscape continues to evolve, data privacy has become a paramount concern for individuals, organizations, and governments alike. The increase in cyber threats, coupled with the growing volume of personal and sensitive data being generated, has made safeguarding this information more critical than ever.

Data privacy statistics are essential for gaining a deeper understanding of current privacy practices, consumer perceptions, and the regulatory environment. These figures provide important insights into how businesses are addressing data protection challenges, the effectiveness of privacy regulations such as GDPR, and the public's view on data security.

With incidents of data breaches and privacy violations on the rise, organizations face mounting pressure to implement robust security measures. By examining the latest data privacy statistics, we can better evaluate the risks, the advancements being made in data protection, and the influence of emerging technologies like AI and big data on privacy standards.

Introduction

Workplace Data Privacy Statistics: In our digital era, workplace data privacy is an important concern for organisations globally. The 2025 Data Privacy Benchmark Study from Cisco shows that 94% of organisations consider privacy a business imperative, and that two-thirds of organisations (98%) said that they report privacy metrics in their board meetings, indicating a global level of maturity around data protection at the board and management levels that we have not always seen in corporate governance.

But while organisations may be focused on data protection, breaches, increasingly internal breaches from employees, and system misconfiguration, etc, are still very real, formidable threats. The 2024 Cost of a Data Breach Report indicates that the global average total cost of a data breach is now $4.88 million, a 10% increase from the previous year and the highest amount of total cost ever recorded by IBM.

This data tells us that data privacy in the workplace has become critical to safeguard our personal, professional, and organisational information, and to foster loyalty and trust.

In the first half of 2024, the share of health-related U.S. data breaches caused by hacking was ** percent, which marked a *** percent increase from 2023, reaching its highest rate since 2014.