According to the Identity theft Resource Center (ITRC), new analysis shows that US data agreements have been reported in the first half of 2025 % at a speed of 2024.
However, the number of affected people in H1 2025 (165,745,452) represents only 12 % notice of the victims issued by mid -2024. In 2024, less than 2024 have been affected by small handfuls of mega violations, compared to 2024.
The main reason for cybertax data violations was where personal information was stolen (1,348 incidents were reported, which led to 114,582,621 affected notices).The number of data violations without information about the main cause of the attack increased from 65 % to 69 % in H1 2024 in the first six months of 2025. This is a trend, ITRC said, which has been going on for the past five years.
Financial services and health care industries are the most targeted sectors with 387 and 283 compromises respectively. Although the number of compromises in financial services are slightly lower than the H1 2024, the health care sector has seen an increase in violations.
Professional services (221 compromises), manufacturing (158 compromise), and education (105 compromise) are among the top five highest target sectors.
“In the first half of the year, we have seen a continuation, and in some cases, trends have increased since 2024,” said James Eli, president of the non -profit identification. “Some of these trends are disturbing-such as lack of transparency due to more than two-thirds of compromises.”

79 supply chain attacks were reported in H1 2025, which affected 690 institutions and resulted in 78,320,240 affected notices.
The report states that “it highlights the effects of the clashes that can fall on a number of organizations and their customers at the same danger in a third party.”
Lee added, “We also saw the use of recycled information.” This is a serious threat to businesses because most data are login and passwords, but that also means that individuals need to take steps to protect them from identification fraud and scams, which they can contact on the ITRC or to contact our website. Individuals are never paid to visit the ITRC for help. “
The ITRC has already traced more physical attacks in the first half of 2025 (34) compared to 2024 (33) throughout the year. Although the absolute number is small, the trend of violation of this data is worth monitoring.
In your inbox every business day, the most important news of insurance.
Get a reliable newsletter of insurance industry
