Consumer data breaches are accelerating in 2026, with reported incidents on pace to surpass last year’s record as cyber threats become more advanced.
Data Compromises Reach New Highs
More than 471 million victim notices were linked to data compromises during the first half of 2026, according to a report from the Identity Theft Resource Center (ITRC).
The figure already exceeds the 297.5 million victim notices reported during all of 2025. The first half of 2026 recorded 1,803 data compromise incidents, compared with 1,732 during the same period last year.
If the current pace continues through the second half of the year, total security incidents in 2026 could surpass the 3,321 incidents reported in 2025.
AI Plays a Growing Role in Cyberattacks
The rise in data breaches comes as artificial intelligence makes it easier for attackers to identify and exploit weaknesses in company systems.
According to an IBM study, one in four breaches between March 2025 and February 2026 involved AI, representing a 56% increase compared with the previous year.
At the same time, companies continue increasing cybersecurity investments. Cybersecurity ranks among the top three priorities for 93% of public company audit committees, while 78% of global companies surveyed by PwC said they planned to increase cybersecurity budgets over the following 12 months.
Malicious Insider Attacks Increase
The ITRC report found 21 data breach events in the first half of 2026 involved malicious insiders, compared with three such incidents during all of 2025.
Malicious insiders are individuals within an organization who misuse their access to steal information. According to ITRC President James Lee, some incidents involved disgruntled employees taking company data after being laid off.
The report also highlighted concerns around fraudulent remote IT workers using stolen identities, deepfake interview videos, and AI-generated resumes to gain access to U.S. businesses.
Consumers Receive Limited Breach Details
Many affected consumers receive limited information about data breaches. Only 24% of breach notices sent during the first half of 2026 included details about the incident, compared with 93% in 2021.
ITRC President James Lee said the lack of consistent disclosure rules means the information consumers receive can depend on where they live.
How Consumers Can Protect Their Information
Experts recommend protecting credit information as one of the strongest ways consumers can reduce the risk of identity theft.
Consumers can regularly review their credit reports from Equifax, Experian, and TransUnion through AnnualCreditReport.com, use credit monitoring services, and add fraud alerts to their credit files.
A credit freeze provides the strongest protection by preventing lenders from accessing credit reports without authorization. While consumers must temporarily lift the freeze when applying for new credit, experts consider it one of the most effective ways to prevent fraudulent accounts from being opened in their name.
