- Internet›
- Cyber Crime›
Cyber crime: biggest online data breaches 2007-2018
Cyber crime: biggest online data breaches 2007-2018
Number of compromised data records in selected data breaches as of November 2018 (in millions)
This statistic presents a selection of the biggest online data breaches worldwide as of November 2018, ranked by number of records stolen. In August 2016, a 2014 hack of online platform Yahoo was uncovered, affecting at least 500 million users accounts. In December 2016, the company revealed another hack dating back to 2013, which affected 1 billion user records. The impact of the second reported Yahoo hack was updated in October 2017, when the company revealed that 3 billion accounts had been affected, making it the largest data breach in history. In 2011, Sony's PlayStation Network and Qriocity music service were attacked by hacking collective Lulzsec. The PSN was offline for more than 43 days and 77 million data records were stolen.
Compromised data records in data breaches – additional information
With the increasing use of digital files and reliance on digital data by many corporations, data breaches have become fairly common in the last decade or so. For example, the number of data breaches in the U.S. increased from 157 million in 2005 to 781 million in 2015, while the number of exposed records jumped from around 67 million to 169 million during the same time frame. The largest data breach of all time, as of September 2016, was an allegedly state-sponsored hack of Yahoo, which dates to late 2014 but it was only uncovered in 2016. The company advised all its users to change their passwords and take further measures to secure their accounts.
Identity theft is the most common type of data breach incident in the world. In 2015, identity theft accounted for more than 50 percent of all global data breaches, and about 40 percent of all compromised records that year. The services sector had the highest number of identities exposed that year – nearly 260 million. This figure accounted for just over 60 percent of all identities were exposed through data breaches in 2015. The financial sector is also highly affected by cyber crimes. Financial access data theft is the second most common type of data breach, accounting for 22 percent of all data breaches. In 2015, this sector had a total of 120 million identities exposed. The costs of cyber crimes are rather high for the financial services sector. Global cyber crimes caused, on average, a 13.5 million U.S. dollars annual loss for the financial services industry, the highest average amongst all industries.
Number of compromised data records in selected data breaches as of November 2018 (in millions)
Loading statistic...
Expand statistic
| Amount of records stolen in millions | |
|---|---|
| Yahoo (Aug '13, revealed Dec '16, updated Oct '17) | 3,000 |
| Facebook (Apr '18)**** | 2,200 |
| River City Media (Feb '17) | 1,370 |
| Aadhaar (Jan '18) | 1,000 |
| Aadhaar system of the Unique Identification Authority of India (UIDAI) (Jan '18 | 1,000 |
| Yahoo (2014, revealved Aug '16)* | 500 |
| Marriott's Starwood guest reservation database (Nov '18) | 500 |
| MySpace (May '16)** | 427 |
| Friend Finder Network Inc (Oct '16) | 412 |
| US Voter database (Dec '15) | 191 |
| Adobe (Sep '13) | 152 |
| eBay (Mar '14) | 145 |
| Equifax (May-Jul '17, reported Sep '17) | 143 |
| Heartland (Jan '09) | 130 |
| LinkedIn (Jun '12, revealed May '16) | 117 |
| VK (Jun '16) | 100 |
| T.J. Maxx (Mar '07) | 94 |
| AOL (Dec '14) | 92 |
| MyHeritage (2017, revealed Jun '18) | 92 |
| Facebook (Mar '18)*** | 87 |
| Dailymotion (Oct '16) | 82.5 |
| Anthem (Feb'15) | 80 |
| Sony PSN (Apr '11) | 77 |
| US Military (Jan '09) | 76 |
| JP Morgan Chase (Jul '14) | 76 |
| Amount of records stolen in millions | |
|---|---|
| Yahoo (Aug '13, revealed Dec '16, updated Oct '17) | 3,000 |
| Facebook (Apr '18)**** | 2,200 |
| River City Media (Feb '17) | 1,370 |
| Aadhaar (Jan '18) | 1,000 |
| Aadhaar system of the Unique Identification Authority of India (UIDAI) (Jan '18 | 1,000 |
| Yahoo (2014, revealved Aug '16)* | 500 |
| Marriott's Starwood guest reservation database (Nov '18) | 500 |
| MySpace (May '16)** | 427 |
| Friend Finder Network Inc (Oct '16) | 412 |
| US Voter database (Dec '15) | 191 |
| Adobe (Sep '13) | 152 |
| eBay (Mar '14) | 145 |
| Equifax (May-Jul '17, reported Sep '17) | 143 |
| Heartland (Jan '09) | 130 |
| LinkedIn (Jun '12, revealed May '16) | 117 |
| VK (Jun '16) | 100 |
| T.J. Maxx (Mar '07) | 94 |
| AOL (Dec '14) | 92 |
| MyHeritage (2017, revealed Jun '18) | 92 |
| Facebook (Mar '18)*** | 87 |
| Dailymotion (Oct '16) | 82.5 |
| Anthem (Feb'15) | 80 |
| Sony PSN (Apr '11) | 77 |
| US Military (Jan '09) | 76 |
| JP Morgan Chase (Jul '14) | 76 |
© Statista 2019
About this statistic
Show source
Download
Settings
Share
Download started
Please be patient - this may take a moment
Please be patient - this may take a moment
Description
Source
More information
This statistic presents a selection of the biggest online data breaches worldwide as of November 2018, ranked by number of records stolen. In August 2016, a 2014 hack of online platform Yahoo was uncovered, affecting at least 500 million users accounts. In December 2016, the company revealed another hack dating back to 2013, which affected 1 billion user records. The impact of the second reported Yahoo hack was updated in October 2017, when the company revealed that 3 billion accounts had been affected, making it the largest data breach in history. In 2011, Sony's PlayStation Network and Qriocity music service were attacked by hacking collective Lulzsec. The PSN was offline for more than 43 days and 77 million data records were stolen.
Compromised data records in data breaches – additional information
With the increasing use of digital files and reliance on digital data by many corporations, data breaches have become fairly common in the last decade or so. For example, the number of data breaches in the U.S. increased from 157 million in 2005 to 781 million in 2015, while the number of exposed records jumped from around 67 million to 169 million during the same time frame. The largest data breach of all time, as of September 2016, was an allegedly state-sponsored hack of Yahoo, which dates to late 2014 but it was only uncovered in 2016. The company advised all its users to change their passwords and take further measures to secure their accounts.
Identity theft is the most common type of data breach incident in the world. In 2015, identity theft accounted for more than 50 percent of all global data breaches, and about 40 percent of all compromised records that year. The services sector had the highest number of identities exposed that year – nearly 260 million. This figure accounted for just over 60 percent of all identities were exposed through data breaches in 2015. The financial sector is also highly affected by cyber crimes. Financial access data theft is the second most common type of data breach, accounting for 22 percent of all data breaches. In 2015, this sector had a total of 120 million identities exposed. The costs of cyber crimes are rather high for the financial services sector. Global cyber crimes caused, on average, a 13.5 million U.S. dollars annual loss for the financial services industry, the highest average amongst all industries.
Show moreCompromised data records in data breaches – additional information
With the increasing use of digital files and reliance on digital data by many corporations, data breaches have become fairly common in the last decade or so. For example, the number of data breaches in the U.S. increased from 157 million in 2005 to 781 million in 2015, while the number of exposed records jumped from around 67 million to 169 million during the same time frame. The largest data breach of all time, as of September 2016, was an allegedly state-sponsored hack of Yahoo, which dates to late 2014 but it was only uncovered in 2016. The company advised all its users to change their passwords and take further measures to secure their accounts.
Identity theft is the most common type of data breach incident in the world. In 2015, identity theft accounted for more than 50 percent of all global data breaches, and about 40 percent of all compromised records that year. The services sector had the highest number of identities exposed that year – nearly 260 million. This figure accounted for just over 60 percent of all identities were exposed through data breaches in 2015. The financial sector is also highly affected by cyber crimes. Financial access data theft is the second most common type of data breach, accounting for 22 percent of all data breaches. In 2015, this sector had a total of 120 million identities exposed. The costs of cyber crimes are rather high for the financial services sector. Global cyber crimes caused, on average, a 13.5 million U.S. dollars annual loss for the financial services industry, the highest average amongst all industries.
- Show sources information
- Show publisher information
- Release date
- November 2018
- Region
- Worldwide
- Survey time period
- November 2018
- Supplementary notes
-
* Although the attack happened in 2014, Yahoo only discovered the incursion after August 2016 reports of a separate breach.
**Over 360 million accounts involved, with each record containing an email address, a password, and in some cases, a second password. As some accounts have multiple passwords, over 427 million total passwords were compromised.
*** Facebook now says the data firm Cambridge Analytica gained unauthorized access to up to 87 million users' data, mainly in the United States.
**** Facebook CEO Mark Zuckerberg revealed that "malicious actors" took advantage of "Search" tools on its platform to discover the identities and collect information on most of its 2 billion users worldwide.
Selected data from Information is Beautiful.
Source
- Show sources information
- Show publisher information
- Release date
- November 2018
More information
- Region
- Worldwide
- Survey time period
- November 2018
- Supplementary notes
-
* Although the attack happened in 2014, Yahoo only discovered the incursion after August 2016 reports of a separate breach.
**Over 360 million accounts involved, with each record containing an email address, a password, and in some cases, a second password. As some accounts have multiple passwords, over 427 million total passwords were compromised.
*** Facebook now says the data firm Cambridge Analytica gained unauthorized access to up to 87 million users' data, mainly in the United States.
**** Facebook CEO Mark Zuckerberg revealed that "malicious actors" took advantage of "Search" tools on its platform to discover the identities and collect information on most of its 2 billion users worldwide.
Selected data from Information is Beautiful.
Statista Accounts:
Access All Statistics. Starting from $588 / Year
Basic Account
Get to know the platform
You only have access to basic statistics.
Premium Account
Your perfect start with Statista
- Instant access to 1m statistics
- Download in XLS, PDF & PNG format
- Detailed references
$49 / Month *
Corporate Account
Full access
Corporate solution including all features.
* All products require an annual contract.
Prices do not include sales tax.
Prices do not include sales tax.
Leading companies trust Statista:
Related Studies: Available to Download in PDF or PPTX Format
All Information
in one Presentation
Online privacy
- 116 page/s
- English
- pptx
- Detailed references
Everything On "Online privacy" in One Document: Edited and Divided into Handy Chapters. Including Detailed References.
Other Reports & Dossiers
Statista has been my savior on several occasions. The site is easy to maneuver and the data is in a format that can go right into a report or presentation.Marlene Greenfield
Vice President, Hearst Magazines
Statistics on "U.S. government and cyber crime"
- IT and cyber security spending
The most important statistics
- Proposed federal spending by the U.S. government on cyber security for selected government agencies during FY 2019 (in million U.S. dollars)U.S. federal government proposed cyber security spending FY 2019
- Proposed budget of the U.S. government for cyber security in FY 2017 to 2019 (in billion U.S. dollars)U.S. government: proposed cyber security spending in FY 2017-2019
- Federal government information technology (IT) expenditure in the United States from 2011 to 2020 (in billion U.S. dollars)U.S. federal government IT expenditure 2011-2020
- Federal government information technology (IT) expenditure in the United States from 2011 to 2020, by significance (in billion U.S. dollars)U.S. federal government IT expenditure 2011-2020, by significance
- Federal government information technology (IT) budget in the United States from 2015 to 2019, by department (in million U.S. dollars)U.S. President's federal government IT budget 2015-2019, by department
- Civilian CFO agency cyber security spending of the U.S. government FY 2017 (in million U.S. dollars)U.S. government: cyber security spending of selected departments 2017
- Countries with the highest commitment to cyber security based on the Global Cybersecurity Index (GCI) as of September 2016Leading countries based on global cyber security ranking (GCI) 2016
- Federal data breaches
The most important statistics
- Share of adults in the United States who think a cyber attack on selected institutions will happen in the next five years as of May 2016 Perceptions of likelihood of cyber attacks in the U.S. in the next five years 2016
- Number of compromised data records in selected data breaches as of November 2018 (in millions)Cyber crime: biggest online data breaches 2007-2018
- Number of cyber security incident reports by federal agencies in the United States from FY 2006 to 2016Annual number of cyber incidents according to U.S. federal agencies 2006-2016
- Number of reported cyber attacks directed against selected departments and agencies of the U.S. government in FY 2017U.S. government: number of cyber security incidents 2017, by department
- Number of reported cyber attacks directed against the U.S. government in FY 2017, by attack vectorU.S. government: number of cyber security incidents 2017, by attack vector
- Number of data breaches in the United States from 2014 to 2018, by industryNumber of U.S. data breaches 2014-2018, by industry
- Distribution of data breaches in the United States from 2014 to 2018, by sectorCyber crime: distribution of breaches 2014-2018, by sector
- Distribution of records exposed due to data breaches in the United States from 2014 to 2018, by sectorCyber crime: distribution of data exposed 2014-2018, by sector
- Hacking
The most important statistics
- Support for delaying Electoral College vote until Electors are briefed on allegations of Russian hacking, as of December 16, 2016Opinion on delaying Electoral College vote due to Russian hack December 2016
- Should the Electoral College change or withhold vote and let Congress review allegations of Russian hacking and appoint the president?Opinion on Electoral College letting Congress choose POTUS due to Russian hack 2016
- Opinion on whether Russia is responsible for DNC hack as of December 13, 2016, by party affiliationOpinion on Russian responsibility for DNC hack by party affiliation December 2016
- Opinion on why Russia hacked the DNC as of December 13, 2016, by party affiliationOpinion on why Russia hacked the DNC by party affiliation December 2016
- Online industries most targeted by phishing attacks as of 3rd quarter 2018Phishing: most targeted industry sectors 2018
- Organizations most targeted by phishing attacks in 2nd quarter 2018, by categoryPhishing: most targeted organization types 2018
- Trust
The most important statistics
- Biggest cyber security problems facing the U.S. government according to adults in the United States as of January 2017Biggest U.S. government cyber security problems according to U.S. adults 2017
- Share of adults in the United States who think the following institutions are prepared to prevent cyber attacks as of May 2016Perceptions of U.S. government and business cyber attack preparedness 2016
- Share of adults in the United States who think the government should be able to access encrypted communications when investigating crimes as of May 2016, by age group U.S. perceptions of law enforcement having access to encrypted communications 2016
- Share of adults tech users in the United States who are confident in the ability of selected institutions to protect their data as of May 2016U.S. adult tech user trust in institutional protection of private data 2016
- Share of adults in the United States who trust selected institutions to keep their personal information secure as of January 2017U.S. adult user trust in institutional security of personal information 2017
- Most punishable types of hacking according to adults in the United States as of January 2017Severest types of hacking according to U.S. adults 2017
- On a scale of 1 to 10, much do you worry about the security of your personal data with online services from governmental agencies?U.S. online user worry about personal data security with government agencies 2017
Popular Related Keywords
Need help with using Statista for your research?
Tutorials and first steps
Further Content: Statistics, Studies, and Topic Pages
Statistics
- Per capita cost for root causes of data breach in the UK in 2015
- Per capita cost of data breach in the UK 2015, by industry
- Lost business costs of data breach in the UK 2010-2015
- Notification costs of data breaches in the UK 2010-2015
- Root causes of data breach in the UK in 2015
- Records compromised during data breaches in Q2 2017
- Leading global data breach methods 2017
- Share of UK companies that use data encryption to prevent data loss 2010-2015
- Share of UK companies that use data loss prevention solutions 2010-2015
- Per capita cost of data breach in the United Kingdom (UK) 2010-2015
- Ex-poste response costs of data breach in the UK from 2010-2015
- Costs arising from data loss in the UK in 2015, by category
- Organisational cost of data breach in the UK 2010-2015
- Share of UK companies that implemented perimeter controls to prevent data loss
- Share of UK companies that implement manual control practices to prevent data loss
- Perceived risk of cyber breach & insider misuse 2015, by industry
- U.S. customers who recall a restaurant experiencing a data breach 2017, by age
- Worldpay customers main three causes of card data breaches in the UK 2011-2014
- Changing consumer behavior as a result of data breaches in the UK 2014-2015
- Italy: causes of data breaches 2017
Studies
- Cyber crime in India
- Cyber crime in Japan
- U.S. companies and cyber crime
- U.S. consumers and cyber crime
- U.S. government and cyber crime
- Cyber crime in Canada
- Cyber crime in Spain
- Verizon 2018 Data Breach Investigations Report
- Cyber crime and cyber security in the United Kingdom (UK)
- Verizon 2017 Data Breach Investigations Report
- ITRC 2018 End-of-Year Data Breach Report
- Protected Health Information Data Breach Report 2018
- 2018 ITRC Data Breach Report H1 2018
- Ransomware
- 2017 ITRC Annual Data Breach Year-End Review
Statistics on "U.S. government and cyber crime"
- Proposed federal spending by the U.S. government on cyber security for selected government agencies during FY 2019 (in million U.S. dollars)
- Proposed budget of the U.S. government for cyber security in FY 2017 to 2019 (in billion U.S. dollars)
- Federal government information technology (IT) expenditure in the United States from 2011 to 2020 (in billion U.S. dollars)
- Federal government information technology (IT) expenditure in the United States from 2011 to 2020, by significance (in billion U.S. dollars)
- Federal government information technology (IT) budget in the United States from 2015 to 2019, by department (in million U.S. dollars)
- Civilian CFO agency cyber security spending of the U.S. government FY 2017 (in million U.S. dollars)
- Countries with the highest commitment to cyber security based on the Global Cybersecurity Index (GCI) as of September 2016
- Share of adults in the United States who think a cyber attack on selected institutions will happen in the next five years as of May 2016
- Number of compromised data records in selected data breaches as of November 2018 (in millions)
- Number of cyber security incident reports by federal agencies in the United States from FY 2006 to 2016
- Number of reported cyber attacks directed against selected departments and agencies of the U.S. government in FY 2017
- Number of reported cyber attacks directed against the U.S. government in FY 2017, by attack vector
- Number of data breaches in the United States from 2014 to 2018, by industry
- Distribution of data breaches in the United States from 2014 to 2018, by sector
- Distribution of records exposed due to data breaches in the United States from 2014 to 2018, by sector
- Average annual costs caused by global cyber crime as of August 2017, by industry sector (in million U.S. dollars)
- Global industries most targeted by cyber espionage in 2017
- Global number of cyber security incidents in 2017, sorted by victim industry and organization size
- Support for delaying Electoral College vote until Electors are briefed on allegations of Russian hacking, as of December 16, 2016
- Should the Electoral College change or withhold vote and let Congress review allegations of Russian hacking and appoint the president?
- Opinion on whether Russia is responsible for DNC hack as of December 13, 2016, by party affiliation
- Opinion on why Russia hacked the DNC as of December 13, 2016, by party affiliation
- Online industries most targeted by phishing attacks as of 3rd quarter 2018
- Organizations most targeted by phishing attacks in 2nd quarter 2018, by category
- Biggest cyber security problems facing the U.S. government according to adults in the United States as of January 2017
- Share of adults in the United States who think the following institutions are prepared to prevent cyber attacks as of May 2016
- Share of adults in the United States who think the government should be able to access encrypted communications when investigating crimes as of May 2016, by age group
- Share of adults tech users in the United States who are confident in the ability of selected institutions to protect their data as of May 2016
- Share of adults in the United States who trust selected institutions to keep their personal information secure as of January 2017
- Most punishable types of hacking according to adults in the United States as of January 2017
- On a scale of 1 to 10, much do you worry about the security of your personal data with online services from governmental agencies?
- Average per capita cost for root causes of the data breach in the United Kingdom (UK) in 2015 (in GBP)
- Average per capita cost of data breach in the United Kingdom (UK) in 2015, by industry (in GBP)
- Average lost business costs of data breach in the United Kingdom (UK) from 2010 to 2015 (in million GBP)
- Average notification costs of data breaches in the United Kingdom (UK) from 2010 to 2015 (in million GBP)
- Distribution of the root causes of data breach in the United Kingdom (UK) in 2015
- Distribution of personally identifiable records compromised during selected global data breaches in 2nd quarter 2017
- Most common action varieties in data breaches worldwide in 2017
- Share of companies that use data encryption to prevent loss of data in the United Kingdom (UK) from 2010 to 2015
- Share of companies that implement data loss prevention solutions to prevent loss of data in the United Kingdom (UK) from 2010 to 2015
- Average per capita cost of data breach in the United Kingdom (UK) from 2010 to 2015 (in GBP)
- The average ex-poste response costs of data breach in the United Kingdom (UK) from 2010 to 2015 (in million GBP)
- Distribution of costs arising from data loss in the United Kingdom (UK) in 2015, by category
- Average organisational cost of data breach in the United Kingdom (UK) from 2010 to 2015 (in million GBP)
- Share of companies that implement strengthening of perimeter controls to prevent loss of data in the United Kingdom (UK) from 2010 to 2015
- Share of companies that implement manual control practices to prevent loss of data in the United Kingdom (UK) from 2010 to 2015
- Increased risk of cyber breach or insider threat according to executives worldwide as of September 2015, by industry
- Share of U.S. customers who recall a data breach at restaurant which compromised customer credit of debit card information as of June 2017, by age
- Share of card data breaches amongst customers of Worldpay systems in the United Kingdom (UK) between 2011 and 2014, by leading three causes
- Which of the following, if any, have you done as a result of data breaches at various major retailers over the past year?
- Most common causes of data breach in Italy in 2017
Statista Accounts:
Access All Statistics. Starting from $588 / Year
Related topics
About Statista
Statista offers dossiers and reports on over 170 industries. With Statista you are always able to make informed decisions and boost your work efficiency.
Internet & Telecommunications
- Social Media
- E-Commerce
- Online Video & Entertainment
- Advertising & Marketing
Consumer Goods & FMCG
- Alcoholic Beverages
- Cleaning Products
- Cosmetics & Personal Care
- Food & Nutrition
Retail & Trade
- Health & Hygiene
- International Trade
- Shopping Behavior
- Sports & Leisure
Travel, Tourism & Hospitality
- Business Travel
- Leisure Travel
- Accomodation
- Restaurants
Society
- Demographics
- Economy
- Education & Science
- Politics & Government
Transportation & Logistics
- Aviation
- Rail Transport
- Vehicles & Road Traffic
- Water Transport
Please log in to access our additional functions
Register in seconds and access exclusive features.
Basic Account |
Instant Access
Premium Account | ||
|---|---|---|---|
Our servicesClick the question mark for further information | Free |
$49 per month* | |
| Basic statistics | |||
| Premium statistics | |||
|
Graph download
| |||
| Download PDF | |||
|
Excel download
| |||
| Register | Purchase now | ||
*Duration: 12 months, billed annually, single license
Exclusive Corporate feature
This feature is limited to our corporate solutions.
Please contact us to get started with full access to dossiers, forecasts, studies and international data.
Corporate Account
We use cookies to personalize contents and ads, offer social media features, and analyze access to our website. In your browser settings you can configure or disable this, respectively, and can delete any already placed cookies. For details, please see your browser’s Help section (by pressing F1). Please see our privacy statement for details about how we use data.