Data breach notices have already blown past last year’s total — and AI is playing a growing role

by | Sep 4, 2026 | Financial

Data breach notices have already blown past last year’s total — and AI is playing a growing role

The number of reported data breaches involving consumer personal information is tracking to exceed last year’s record, according to new research from the Identity Theft Resource Center. Through the first half of 2026, more than 471 million victim notices were associated with data compromises, compared to 297.5 million notices issued throughout 2025. A single incident at education platform Canvas generated 275 million of those notices. The incident count reached 1,803 breaches during the first six months, up from 1,732 during the same period in 2025, suggesting the full-year total could surpass the 3,321 incidents reported for all of last year.

Artificial intelligence capabilities are increasingly being leveraged to exploit vulnerabilities in corporate systems. Between March 2025 and February 2026, approximately one in four data breaches involved AI-enabled attacks, marking a 56 percent increase compared to the prior year, according to research from IBM. Despite widespread recognition of cybersecurity risks, with 93 percent of audit committees at public companies identifying it as a top-three priority, organizations continue to struggle with defense. Survey data indicates that 78 percent of global companies plan to increase their cybersecurity budgets over the coming year.

A notable trend involves attacks from within organizations. The ITRC documented 21 incidents involving malicious insiders during the first half of the year, compared to just three for all of 2025. Some cases involved disgruntled employees stealing data after being laid off. Additionally, authorities have identified a coordinated scheme in which North Korean actors place remote IT workers in U.S. companies using stolen identities, deepfake video interviews, and artificial intelligence-generated resumes, representing what researchers describe as a significant structural driver of insider attacks.

Consumers have limited visibility into breach details, as only 24 percent of notices sent in the first half of 2026 included specifics about compromised data, down substantially from 93 percent in 2021. Experts recommend credit monitoring and freezes as protective measures. Services such as AnnualCreditReport.com offer free access to credit reports from the three major bureaus, while credit freezes provide the most robust protection by preventing unauthorized account openings, though they require temporary lifting when legitimate credit applications are needed.

Article Attribution | Read More at Article Source

Article summary produced by Claude AI