Curious Lab Breach Index
Publicly reported data breach losses this year
Loading…
Money traced to a named source: crypto thefts, regulatory fines, settlements, victim compensation, ransoms and disclosed losses. It is a floor, not a ceiling. Most breached organizations never publish what the incident cost them.
How many breaches happened
Breaches made public each month
Breaches added to Have I Been Pwned (updated daily).
SEC cyber incident filings each month
US public companies reporting a material cybersecurity incident (8-K Item 1.05, updated daily).
Crypto hacks each month
Incidents in DeFiLlama's hack tracker (updated daily).
US data compromises (ITRC)
From the Identity Theft Resource Center's latest report.
Compromises by sector (ITRC)
From the latest ITRC report.
Records exposed each month
Accounts in breaches added to Have I Been Pwned.
Date-wise money lost
Each dated loss, in order, on one shared scale. Month totals also include smaller crypto hacks not listed individually. Rows marked auto-detected were found in the news automatically and have not been checked by a person.
Losses by month
Monthly losses, split by type
US dollars. The current month is partial.
Running total through the year
Cumulative documented losses, US dollars.
Where the money went
Losses by type
Share of the documented total.
Largest single losses
US dollars.
What the full cost probably looks like
A rough scale check, not a measured figure: ITRC's compromise count multiplied by IBM's average cost per breach.
Estimated cost
Average cost per breach (IBM)
Millions of US dollars.
All the data
| Date | Incident or item | Type | Loss (USD) | Source |
|---|
| Month | Crypto | Other losses | Month total | Running total |
|---|