Record-High Data Breaches in 2025 with 80% Consumers Receiving Breach Notices

Last updated Jan 29, 2026

Data Breach Notifications: A Sign of the Times

There’s a letter that’s become all too familiar to many consumers – the notification of a data breach involving your personal information. According to a survey by the Identity Theft Resource Center, about 80% of respondents reported receiving at least one data breach notice in the past 12 months. In fact, nearly 40% received three to five separate notices during that period. And for 88% of those surveyed, the data breach resulted in at least one negative consequence, such as increased phishing attempts, more spam emails or robocalls, or an attempted account takeover.

Record-Breaking Number of Data Breaches

Data compromises saw a 5% increase last year, with 3,322 events in 2025 compared to 3,152 in 2024 – a historical high, according to the ITRC’s annual report. “We have once again had more breaches in a single year reported than in any previous year,” stated ITRC President James E. Lee.

Government Data Handling Under Scrutiny

The issue of data breaches has brought a new focus on how the government handles personal data, particularly at the Social Security Administration. The Justice Department recently revealed alleged mishandling of personal data at the agency, which included the names and addresses of about 1,000 individuals being included in a password-protected email attachment. It remains unclear if the password needed to access the data was also shared.

Data Security Lapses at Social Security Administration

An August whistleblower report alleged serious data security lapses at the Social Security Administration, which might put the security of more than 300 million Americans’ data at risk. Despite reassurances from Social Security Administration Commissioner Frank Bisignano and other spokespersons that they are committed to safeguarding personal data and that American data is secure, the question remains – is our data really safe?

The Reality of Data Breaches: “Everyone’s Identity Has Already Been Stolen”

Experts are advising consumers to assume their data has already been exposed in multiple breaches. Haywood Talcove, CEO of government at LexisNexis Risk Solutions, even went as far as saying, “Everyone’s identity has already been stolen. The only question is, has it been used?”. This worrying statement highlights the lack of public information about personal data compromises, as federal data breaches are not always publicly disclosed. Furthermore, data breach notices have become increasingly vague due to litigation risks.

Steps to Protect Your Personal Data Following a Data Breach

However, all is not lost. There are several steps you can take to enhance the security of your personal data and reduce the potential impact of data breaches:

Sign up for Informed Delivery: A free service through the U.S. Postal Service that sends you preview images of your incoming mail.
Register for a property fraud alert: This will notify you if anyone tries to steal your title.
Freeze your credit: This can prevent identity thieves from opening new accounts in your name.
Set up account alerts: Alerts on all of your bank and other financial accounts so that you see when money is going out.
Use passkeys: Sign into accounts via fingerprints or face scans or PINs rather than passwords.
Use a password manager: This will help ensure that each account has a unique, complex password.
Add multifactor authentication: This requires two or more proofs of identity to log into an account.

Despite the increasing threat of data breaches, by taking these proactive measures, you can significantly enhance the security of your personal data.