Global data breach stats

This page contains publicly available information about personal data that’s been copied, transmitted, viewed, and stolen from data holders, or otherwise illegally used since 2004.

16,284,828,554

Total number of breached accounts

Most accounts breached

Fewest accounts breached

World map

What you need to know about the numbers

This data is updated periodically, so make sure to check the numbers once in a while if you quote them. That said, there are two important things you should know about these numbers:

  • Most people use the same email for different accounts when registering online. That’s why a single email or account can be breached several times in different cases and some numbers may seem so high (like 16.3B total breached accounts).
  • 29.5% of the total breached accounts did not contain information about a person’s country of residence. So the numbers of country-specific breaches are actually much higher than you see below.

Accounts get breached more than once

Since 2004, a total of 16.3B accounts have been breached and approximately 5.7B of them have unique email addresses. This means that on a global scale:

  • A single email address is breached 3 times on average.
  • 73 unique email addresses are breached per 100 people.
  • 209 accounts are breached per 100 people on average.

Countries with the highest number of breached accounts since 2004

Countries with a population of less than 1M people are not included

Country
Total breaches
Breached accounts per 100 people

1The U.S.

2,613,723,238
790

2Russia

2,278,861,401
1,562

3China

1,028,656,041
71

4France

508,191,955
779

5Germany

476,206,913
568
Full list of analyzed countries

American and Russian accounts are breached way more often than in other countries. Cases in these two countries make up for 30.0% of the total breaches worldwide:

  • The U.S. holds the highest number of breached accounts in the world. This makes up 16.1% of all breached email addresses globally. Leaked Russian email accounts make up a number - 14.0% of the total global breaches.
  • Russia has the highest number of breached accounts per 100 inhabitants. Statistically, the email address of every Russian account was breached around 16 times. This number is 7.5 times higher than the global average (209 breached accounts per 100 people).

Comparing breach numbers in 2023'Q1 and 2022'Q4

These tables show the top 3 countries that saw the biggest changes in the number of data breaches they suffered in 2023'Q1 compared to 2022'Q4.

Countries with a population of less than 1M people are not included

Quarterly change in
Country
Percentage increase
Breached accounts

1Taiwan

1,991 %
3,805,006

2Saudi Arabia

1,789 %
623,373

3South Korea

1,148 %
1,195,101
Quarterly change in
Country
Percentage decrease
Breached accounts

1South Sudan

−99 %
−18,129,661

2China

−97 %
−14,892,408

3Argentina

−95 %
−962,730

TOP 10 countries by leaked data points

U.S. flagU.S.

Most leaked:
Password
1,769,244,596
Username
735,694,552
Firstname
624,841,912
Lastname
586,596,805
Ip
585,842,411
Other
5,711,122,394
Total no:
10,013,342,670

Russia flagRussia

Most leaked:
Password
2,905,392,111
Password hash
188,145,821
Username
159,173,177
Name
77,521,341
Phone
60,104,732
Other
344,796,594
Total no:
3,735,133,776

China flagChina

Most leaked:
Password
914,947,761
Password hash
349,636,270
Username
308,445,462
Ip
66,931,626
Name
63,603,709
Other
164,755,584
Total no:
1,868,320,412

France flagFrance

Most leaked:
Password
447,929,837
Username
167,502,506
Country
90,083,308
Password hash
83,167,076
Date of birth
82,830,016
Other
484,821,922
Total no:
1,356,334,665

Brazil flagBrazil

Most leaked:
Password
151,177,536
Username
126,660,911
Name
94,077,265
Country
77,829,384
Gender
72,205,681
Other
666,421,368
Total no:
1,188,372,145

India flagIndia

Most leaked:
Password
151,876,950
Password hash
84,609,436
Phone
84,512,766
Firstname
84,208,313
Name
81,801,202
Other
598,073,876
Total no:
1,085,082,543

U.K. flagU.K.

Most leaked:
Password
231,342,189
Username
108,305,670
Name
56,229,745
Password hash
54,909,172
Ip
50,963,847
Other
466,257,384
Total no:
968,008,007

Germany flagGermany

Most leaked:
Password
510,294,495
Username
82,428,763
Password hash
65,287,138
Country
33,795,140
Ip
31,907,059
Other
223,932,733
Total no:
947,645,328

Italy flagItaly

Most leaked:
Password
277,549,760
Username
69,394,699
Password hash
52,475,336
Date of birth
26,295,427
Firstname
24,714,279
Other
168,995,975
Total no:
619,425,476

Canada flagCanada

Most leaked:
Password
152,877,972
Username
63,382,182
Password hash
40,840,284
Name
32,742,354
Ip
27,947,734
Other
244,896,447
Total no:
562,686,973

Number of data points lost per capita

American and Russian accounts are exposed to cyber risks the most. The U.S. ranks 1st according to the number of data points leaked per capita, where a single person has lost 30 data points on average to breaches since 2004. Russia comes second with 26 data points per person. France ranks third with 21 data points per capita.

Number of data points leaked per account

A total of 55.3B data points have been exposed (16.3B of them have been email addresses) since 2004. On average, each email address is leaked with 2.4 additional data points.

Vietnamese, Iraqi, and Guatemalan accounts are breached with the most data points

Compromised Vietnamese email addresses have lost 4.2 data points on average. Together with their email, Vietnamese users lost 77.1% more data points to breaches than the global average. Iraqi and Guatemalan emails are breached with an average of 4.0 additional data points. This may suggest that users from these countries tend to fill in online forms more meticulously, putting more of their data in danger to be breached.

How data breaches compare across regions and countries

Countries with a population of less than 1M people are excluded when selecting the country with the most/fewest breaches.

Total breached accounts Breached accounts per 100 people Data points per breached account No. of passwords leaked per 100 breached accounts
Global
Total breached accounts 16,284,828,554Breached accounts per 100 people 209Data points per breached account 2.4No. of passwords leaked per 100 breached accounts 85
Total breached accounts 4,865,753,449Breached accounts per 100 people 649Data points per breached account 2.1No. of passwords leaked per 100 breached accounts 108
Region with most breaches
Eastern Europe
Total breached accounts 2,667,807,509Breached accounts per 100 people 910Data points per breached account 1.7No. of passwords leaked per 100 breached accounts 123
Region with least breaches
Northern Europe
Total breached accounts 448,232,481Breached accounts per 100 people 422Data points per breached account 3.0No. of passwords leaked per 100 breached accounts 78
Country with most breaches
Russia
Total breached accounts 2,278,861,401Breached accounts per 100 people 1,562Data points per breached account 1.6No. of passwords leaked per 100 breached accounts 127
Country with least breaches
Kosovo
Total breached accounts 113,576Breached accounts per 100 people 6Data points per breached account 3.3No. of passwords leaked per 100 breached accounts 65

People from Europe are 3 times more likely to suffer account data leaks than the global population

Breaches in Europe account for 29.9% of the total global breaches. To put this into perspective, a single person from Europe has gotten their online account details leaked around 6 times since 2004. However, not all the countries are exposed to cyber risks on the same level. Russia is the most targeted country, with 5 out of 10 breaches in Europe happening there.

Breached accounts’ QoQ analysis (2020-present)

3.0B accounts have been breached since the start of 2020

This accounts for 18.6% of the total global breaches that have happened since 2004. In turn, this has affected 11 out of 100 people globally each year.

Breach rates have been on the decline compared to the last quarter

In 2022'Q4, 623 accounts were being breached every minute. In 2023'Q1, however, breach rates are 22.8% lower, with 481 accounts being leaked every 60 seconds.

Quarter with the highest number of breaches over the last year

2022'Q3 had the most data breaches over the last year. 117.8M accounts were breached in total, which means that:

  • 54.4 % more quarterly breaches occurred than the yearly average (76.3M).
  • 2 out of 100 people in the world suffered account breaches in 2022'Q3.

Quarter with the lowest number of breaches over the last year

2023'Q1 had the fewest data breaches over the last year. 41.6M accounts were breached, which is:

  • 1.8 times fewer quarterly breaches than the yearly average (76.3M).
  • 2.8 times fewer than in 2022'Q3, the quarter with the highest number of breaches over the last year.

Countries affected by breaches most each quarter

Countries with a population of less than 1M people are not included