Global data breach stats

This page contains publicly available information about personal data that’s been copied, transmitted, viewed, and stolen from data holders, or otherwise illegally used since 2004.

15,505,779,224

Total number of breached accounts

Most accounts breached

Fewest accounts breached

What you need to know about the numbers

This data is updated periodically, so make sure to check the numbers once in a while if you quote them. That said, there are two important things you should know about these numbers:

  • Most people use the same email for different accounts when registering online. That’s why a single email or account can be breached several times in different cases and some numbers may seem so high (like 15.5B total breached accounts).
  • 30.7% of the total breached accounts did not contain information about a person’s country of residence. So the numbers of country-specific breaches are actually much higher than you see below.

Accounts get breached more than once

Since 2004, a total of 15.5B accounts have been breached and approximately 5.4B of them have unique email addresses. This means that on a global scale:

  • A single email address is breached 3 times on average.
  • 69 unique email addresses are breached per 100 people.
  • 199 accounts are breached per 100 people on average.

Countries with the highest number of breached accounts since 2004

Countries with a population of less than 1M people are not included

Country
Total breaches
Breached accounts per 100 people

1The U.S.

2,467,638,444
746

2Russia

2,253,830,272
1,544

3China

1,023,412,500
71

4Germany

452,062,669
540

5France

425,999,154
653
Full list of analyzed countries

American and Russian accounts are breached way more often than in other countries. Cases in these two countries make up for 30.4% of the total breaches worldwide:

  • The U.S. holds the highest number of breached accounts in the world. This makes up 15.9% of all breached email addresses globally. Leaked Russian email accounts make up a number - 14.5% of the total global breaches.
  • Russia has the highest number of breached accounts per 100 inhabitants. Statistically, the email address of every Russian account was breached around 15 times. This number is 7.8 times higher than the global average (199 breached accounts per 100 people).

Comparing breach numbers in 2022'Q4 and 2022'Q3

These tables show the top 3 countries that saw the biggest changes in the number of data breaches they suffered in 2022'Q4 compared to 2022'Q3.

Countries with a population of less than 1M people are not included

Quarterly change in
Country
Percentage increase
Breached accounts

1Turkey

1,463 %
1,956,169

2North Korea

543 %
3,799

3Australia

494 %
1,583,048
Quarterly change in
Country
Percentage decrease
Breached accounts

1Benin

−98 %
−29,663

2Zambia

−98 %
−70,235

3Indonesia

−98 %
−13,019,571

TOP 10 countries by leaked data points

U.S. flagU.S.

Most leaked:
Password
1,687,744,050
Username
677,448,198
Firstname
606,138,194
Ip
587,279,672
Lastname
569,711,439
Other
5,559,264,673
Total no:
9,687,586,226

Russia flagRussia

Most leaked:
Password
2,903,630,695
Password hash
187,504,177
Username
144,589,979
Name
71,287,579
Phone
52,331,994
Other
293,141,484
Total no:
3,652,485,908

China flagChina

Most leaked:
Password
913,243,888
Password hash
349,225,713
Username
304,647,546
Ip
66,582,327
Name
62,279,028
Other
161,548,975
Total no:
1,857,527,477

India flagIndia

Most leaked:
Password
143,996,724
Password hash
82,350,059
Firstname
80,622,483
Phone
80,096,565
Name
74,097,987
Other
548,115,036
Total no:
1,009,278,854

France flagFrance

Most leaked:
Password
434,849,250
Username
101,720,414
Password hash
80,110,354
Firstname
35,752,862
Country
33,693,521
Other
247,332,310
Total no:
933,458,711

Germany flagGermany

Most leaked:
Password
503,672,454
Password hash
64,303,294
Username
64,228,954
Ip
31,624,354
Name
20,211,991
Other
162,182,910
Total no:
846,223,957

U.K. flagU.K.

Most leaked:
Password
210,607,929
Username
79,629,218
Password hash
50,778,819
Ip
49,630,924
Name
46,603,179
Other
377,163,643
Total no:
814,413,712

Brazil flagBrazil

Most leaked:
Password
136,218,026
Username
77,799,436
Name
67,921,232
Password hash
61,592,341
Ip
47,783,880
Other
384,298,347
Total no:
775,613,262

Italy flagItaly

Most leaked:
Password
275,161,164
Username
59,277,152
Password hash
51,608,170
Date of birth
21,744,548
Firstname
20,451,665
Other
139,244,197
Total no:
567,486,896

Canada flagCanada

Most leaked:
Password
146,300,728
Username
55,769,495
Password hash
40,072,108
Name
28,184,993
Ip
27,751,915
Other
220,636,401
Total no:
518,715,640

Number of data points lost per capita

American and Russian accounts are exposed to cyber risks the most. The U.S. ranks 1st according to the number of data points leaked per capita, where a single person has lost 29 data points on average to breaches since 2004. Russia comes second with 25 data points per person. Portugal ranks third with 15 data points per capita.

Number of data points leaked per account

A total of 51.7B data points have been exposed (15.5B of them have been email addresses) since 2004. On average, each email address is leaked with 2.3 additional data points.

Vietnamese, Iraqi, and American accounts are breached with the most data points

Compromised Vietnamese email addresses have lost 4.3 data points on average. Together with their email, Vietnamese users lost 83.4% more data points to breaches than the global average. Iraqi and American emails are breached with an average of 4.1 and 3.9 additional data points. This may suggest that users from these countries tend to fill in online forms more meticulously, putting more of their data in danger to be breached.

How data breaches compare across regions and countries

Countries with a population of less than 1M people are excluded when selecting the country with the most/fewest breaches.

Total breached accounts Breached accounts per 100 people Data points per breached account No. of passwords leaked per 100 breached accounts
Global
Total breached accounts 15,505,779,224Breached accounts per 100 people 199Data points per breached account 2.3No. of passwords leaked per 100 breached accounts 88
Total breached accounts 4,610,154,928Breached accounts per 100 people 615Data points per breached account 2.0No. of passwords leaked per 100 breached accounts 112
Region with most breaches
Eastern Europe
Total breached accounts 2,623,097,648Breached accounts per 100 people 895Data points per breached account 1.7No. of passwords leaked per 100 breached accounts 125
Region with least breaches
Northern Europe
Total breached accounts 393,656,512Breached accounts per 100 people 370Data points per breached account 2.9No. of passwords leaked per 100 breached accounts 82
Country with most breaches
Russia
Total breached accounts 2,253,830,272Breached accounts per 100 people 1,544Data points per breached account 1.6No. of passwords leaked per 100 breached accounts 129
Country with least breaches
Kosovo
Total breached accounts 117,474Breached accounts per 100 people 7Data points per breached account 3.3No. of passwords leaked per 100 breached accounts 67

People from Europe are 3 times more likely to suffer account data leaks than the global population

Breaches in Europe account for 29.7% of the total global breaches. To put this into perspective, a single person from Europe has gotten their online account details leaked around 6 times since 2004. However, not all the countries are exposed to cyber risks on the same level. Russia is the most targeted country, with 5 out of 10 breaches in Europe happening there.

Breached accounts’ QoQ analysis (2020-present)

2.5B accounts have been breached since the start of 2020

This accounts for 16.2% of the total global breaches that have happened since 2004. In turn, this has affected 10 out of 100 people globally each year.

Breach rates have been on the rise compared to the last quarter

In 2022'Q3, 882 accounts were being breached every minute. In 2022'Q4, however, breach rates are 29.7% higher, with 1,144 accounts being leaked every 60 seconds.

Quarter with the highest number of breaches over the last year

2022'Q3 had the most data breaches over the last year. 114.3M accounts were breached in total, which means that:

  • 47.0 % more quarterly breaches occurred than the yearly average (77.7M).
  • 1 out of 100 people in the world suffered account breaches in 2022'Q3.

Quarter with the lowest number of breaches over the last year

2022'Q4 had the fewest data breaches over the last year. 49.4M accounts were breached, which is:

  • −36.4 % fewer quarterly breaches than the yearly average (77.7M).
  • 2.3 times fewer than in 2022'Q3, the quarter with the highest number of breaches over the last year.

Countries affected by breaches most each quarter

Countries with a population of less than 1M people are not included