Breaches Up, Number of Victims Down, Impact Stronger

The ITRC 2025 Data Breach Report reveals a record 3,322 data compromises in the U.S., a 79% increase over five years. While victim counts dropped from 1.36 billion to 278.8 million, this reflects attackers shifting to quality-over-quantity tactics—stealing data rather than encrypting it. Supply chain attacks doubled since 2021, now accounting for 30% of all breaches. Transparency is declining, with only 30% of companies disclosing breach causes versus nearly 100% in 2020. Hackers are using AI to repackage previously compromised data for new attacks, and small businesses are passing cleanup costs to consumers. Experts warn that AI-generated deepfakes will undermine voice/video authentication, and the combination of AI and quantum computing threatens existing security practices. Incident response windows have collapsed from days to hours.