Data Breach

A Big Concern Grows Bigger

A data breach occurs when a company loses digitally stored information. This can include names, addresses, and other private information of customers or employees such as health records and credit card numbers.


The most common form of data breach is a loss caused by attackers. But there is more than one way to enter a network and access the sensitive data of customers and partners. Breaches of data can also result from a company either losing devices that contain information or having them stolen. In instances when a company loses devices through neglect or theft, the result is essentially the same as a targeted attack—data can potentially be exposed to the wrong people.

2015 Data Breach Timeline

2015 was a record-setting year: A massive megabreach (more than 10 million records exposed) in December 2015 helped set a new record for identities exposed in a single year; at 42 total breaches, July saw the highest ever number of breaches in a one-month period.

Identities Exposed, by Industry (in millions)

In 2015, an estimated 426 million personal records were stolen or lost, the aggregate result of only 291 breaches.

Top 10 Information Types Exposed in 2015

The more personal the details that are acquired, the easier it is to commit identity fraud. To obtain the most complete profiles of individuals, criminals target insurance, government, and healthcare organizations.


*includes stolen credit card details and other financial credentials 

From insider attacks to point-of-sale devices, data breaches in 2015 cost victims more than ever, as the number of megabreaches climbed to its highest level since 2013. With attackers stealing massive amounts of personal information through breaches, personal data becomes more exposed, putting everyone at increasing risk of fraud and identity theft.

“Internet Security Threat Report,” 2016, Symantec Corporation.