Breach and Fine Tracker
Menu

Directory · 45 entries

Official data breach statistics

Each row is one figure from an official report, with the period it covers and the publication date. Sources are the OAIC 1, the HHS Office for Civil Rights 2, the Irish DPC 3, the Office of the Privacy Commissioner of Canada 4 and the UK government 5. Periods differ between bodies, so figures from different rows should not be added or compared as like for like.

Last checked 24 October 2026

45 / 45

Notes

  • The HHS breach portal lists breaches of 500 or more people 7. The figures above come from the yearly report, not the live list 2.
  • The UK survey figures are survey estimates, and the cost figures are self-reported 5.
  • The Change Healthcare figure is the number reported by the company to HHS 6.
  • The OAIC prints two totals for 2024. Its NDB report of 13 May 2025 gives 1,113 1. Its release of 6 July 2026 gives 1,112 8.

Rules and charges change. Check the official source linked on this page before you pay or travel. Spotted an error? Email hello@breachandfinetracker.com.

Sources

  1. OAIC: Notifiable Data Breaches Report: July to December 2024 (13 May 2025)
  2. HHS Office for Civil Rights: Annual Report to Congress on Breaches of Unsecured Protected Health Information For Calendar Year 2024
  3. Data Protection Commission: Data Protection Commission Publishes Annual Report for 2025 and Results of "Sharenting" Survey (30 June 2026)
  4. Office of the Privacy Commissioner of Canada: Prioritizing privacy in a data-driven world, 2024-2025 Annual Report to Parliament on the Privacy Act and the Personal Information Protection and Electronic Documents Act (5 June 2025)
  5. GOV.UK: Cyber security breaches survey 2025 (10 April 2025)
  6. HHS: Change Healthcare Cybersecurity Incident Frequently Asked Questions (updated as of 14 March 2025)
  7. HHS: Submitting Notice of a Breach to the Secretary
  8. OAIC: Data breach notifications increase to all-time high in 2025, new NDB stats show (6 July 2026)