Data Breach Statistics

Data Records Lost or Stolen Since 2013



of breaches were “Secure Breaches” where encryption was used and the stolen data was rendered useless.

Data records are lost or stolen at the following FREQUENCY

Every Day


Every Hour


Every Minute


Every Second


2017: A Record Year for Stolen Data

2017 BLI Annual Report

A fair number of data breach trends emerged in 2017. One of the most significant developments of the year was an abundance of poor security practices. One company didn't have a robust vulnerability management plan in place, allowing criminals to exploit a vulnerability in its website, move laterally across the company's network, and steal hundreds of millions of Americans' personal information, and most notably on several occasions.

Overall, Gemalto detected an 11 percent drop in the number of data breaches from 1,981 in 2016 to 1,765 in 2017. In spite of that decline, Breach Level Index data suggests that security incidents are getting faster and larger in scope. The total number of records breached every day, hour, minute, and second tracked by Gemalto nearly doubled in the span of a year. The aggregate number of breached records saw similar growth, an 87.5 percent increase, the first time the total number of records detected by BLI over a calendar year has exceeded 2 billion.

Access 2017 Annual Report Download 2017 Infographic (JPG)

Recent Data Breaches

Data Records Stolen or Lost by Industry

Shows percentage of total records, hover over pie chart for record totals.

CyberVor records not included as affected industries are unknown.

Industry Breach Details

From an industry perspective, the greatest number of records compromised originated from organizations in economic sectors classified as "other," racking up over 1.3 billion breached records, up from more than 86 million the year before. That surge notwithstanding, the number of incidents declined in those segments by 57.5 percent from 160 to 68. Astonishingly, professional services and social media saw an even greater rate of growth in their number of compromised records. Other sectors also experienced a notable influx of breached records, industrial, financial services and education all saw increased totals. A few industries registered modest growth in their breached account totals, in government, healthcare and technology. There were plenty of industries where the total breached records actually fell but the number of incidents rose. Non-profit and retail industries actually saw the number of breaches and compromised records both decrease over the past year.

Access 2017 Annual Report

A Geographic View

Hover over map points to display total records breached by location.

Date Range: 2013 - Present

World Map
Download 2017 Infographic (JPG)

Secure the Breach

This brief video will introduce a new perspective in accepting that a breach will happen; we call this Breach Acceptance. When companies adopt the Secure the Breach mindset, they will fundamentally change the way they protect their organization by securing the real target of attacks -- the data -- rather than securing the vector.
A New Mindset

Breach Risk Calculator

BLI Risk Calculator

How bad might a breach be if it did happen to you? Calculate your own risk score and breach severity using the Breach Level Index. Provide a few inputs as to the number of records that could be affected, and the type and source of breach possibilities. The score is calculated based on these factors, and how the stolen information was used. The point of the scoring system is to demonstrate that not all breaches have the same impact on organizations or the same amount of risk. Use your score to gauge the breach severity and see how to your organization can better prepare for a breach.

Calculate Your Score


Breaches are no longer a binary proposition where an organization either has or hasn't been breached. Instead they are wildly variable — having varying degrees of fallout — from breaches compromising entire global networks of highly sensitive data to others having little to no impact whatsoever.

The Breach Level Index not only tracks publicly disclosed breaches, but also allows organizations to do their own risk assessment based on a few simple inputs that will calculate their risk score, overall breach severity level, and summarize actions IT can take to reduce the risk score.
Read Overview

Request More Information about Data Breach Security