The Weekly Breach Breakdown: A Peak Behind the Numbers – ITRC H1 2026 Data Breach Report

Summary

• According to the Identity Theft Resource Center’s H1 2026 Data Breach Report, in the first six months of 2026, the ITRC tracked 1,803 data compromises. The second quarter alone tallied 1,029 compromises, the second-highest single-quarter total in ITRC tracking history. 
• Just over 471 million victim notices were issued, eclipsing the 297.5 million issued in all of 2025. While many notices are being issued, only 24% contained details about the attack vector, the lowest rate ever recorded by the ITRC.
• The ITRC tracked 21 insider wrongdoing events in the first half of the year, a sevenfold increase over all of 2025, due to tech-sector layoffs and nation-state recruitment schemes.
• Consumers should assume their data has been exposed. The ITRC recommends that individuals freeze their credit files via com, switch to passkeysto prevent credential theft and enable multifactor authentication. 
• To learn about the latest data compromises, consumers and businesses should visit the ITRC’s data breach tracking tool, Breach Alert. If you believe you are the victim of ID theft, fraud or a scam, call or text toll-free at 400.5530 or live chat on our website.

Full Transcript

Mount Everest is 5.5 miles tall. Can you imagine a stack of paper that would be the equivalent of stacking 16 Mount Everests on top of each other? If you stacked every data breach notice issued in the first half of 2026, that is how tall the stack would be. Welcome to the Identity Theft Resource Center’s Weekly Breach Breakdown for July 24, 2026. I’m Alex Achten, Vice President of Media Relations for the ITRC. Thanks to Sentilink for supporting the ITRC and this podcast. Each week, we review the latest events and trends in data security and privacy. Today, we are taking a deep dive into our recently released H1 2026 Data Breach Report.

I will get back to the number of data breach notices issued in a minute. However, let’s start by looking at the number of data compromises. In the first six months of 2026, the ITRC tracked 1,803 data compromises. The second quarter alone tallied 1,029 compromises, the second-highest single-quarter total in ITRC tracking history. If the current pace continues, annual compromises could reach approximately 3,600 events, marking a four-year streak of more than 3,000 annual compromises. It also puts 2026 on pace to set a new annual record compared to the 3,321 compromises recorded in 2025.  

Now, let’s take a look at those victim notices. According to our H1 2026 Data Breach Report, 471.2 million victim notices were issued, eclipsing the 297.5 million issued in all of 2025. Just how many victim notices is that? We know it is the equivalent of stacking 16 Mount Everests on top of each other. It is also roughly 13 times higher than a cruising airplane at around 35,000 feet. The stack would blast past the edge of outer space and sit firmly in the thermosphere. This might be the craziest stat of them all: If you laid the sheets end-to-end instead of stacking them, they would wrap around the Earth’s equator nearly 10 times.

Okay, you get the picture. It is a lot of victim notices. However, while many notices are being issued, they say little of substance. Only 24% of those notices contained details about the attack vector, the lowest rate ever recorded by the ITRC. This prevents consumers, businesses and policymakers from understanding their true risk exposure or taking meaningful preventive action.

A few other trends worth noting from the ITRC H1 2026 Data Breach Report are:

• A surge in insider wrongdoing. The ITRC tracked 21 insider wrongdoing events in the first half of the year, a sevenfold increase over all of 2025, driven by tech-sector layoffs and nation-state recruitment schemes. In all the years the ITRC has been tracking data breaches, there have never been more than three reported in a single year caused by a malicious employee.
• An escalation of zero-day attacks. Powered partly by artificial intelligence tools that uncover software flaws faster than humans can, zero-day attacks rose to 14 events in H1 2026, nearly matching the 17 events recorded in all of 2025.
• Public companies face a high concentration. Publicly traded corporations accounted for only 10.3% of compromised entities but generated 83.4% of all victim notices.
• Supply chain risks are compounding. Supply chain attacks generated 280.6 million victim notices from just 38 initial breach events, impacting 206 entities in total and demonstrating a severe multiplier effect. 

What does all of this mean for businesses and consumers? Let’s start with businesses.

For businesses, the ITRC advises adopting a zero-trust architecture, implementing least-privilege access controls to combat insider threats, vetting supply chain vendors in real time and prioritizing transparency by voluntarily disclosing attack vectors to build consumer trust. 

For consumers, you should assume your data is exposed. The ITRC recommends that individuals freeze their credit files via FrozenPII.com, switch to passkeys to prevent credential theft and enable multifactor authentication. 

There is much more to the ITRC H1 2026 Data Breach Report that we don’t have time to get into on this podcast. However, you can download the report by visiting IDTheftCenter.org and clicking on “Reports” under the “Resources” tab. To download the report, you can also click here.

If you want to know more about how to protect your business or personal information or think you have been the victim of identity theft, fraud or a scam, you can speak with an expert ITRC advisor on the phone, via text message, chat live on the web, or exchange emails during our normal business hours Monday through Friday (6 a.m. to 5 p.m. Pacific time). Just visit IDTheftCenter.org to get started.

Thanks again to Sentilink for their support of the ITRC and this podcast. Please hit the like button for this episode and subscribe wherever you listen to your podcasts.

We will return next week with another episode of the Weekly Breach Breakdown. I’m Alex Achten. Until then, thanks for listening.