RESEARCH

US Data Compromises Reached a Record 3,205 Incidents in 2023, a 78% Surge Over 2022

The Identity Theft Resource Center documented 3,205 data compromises in the United States in 2023 — a 78% increase over 2022 and the highest single-year total on record. Healthcare, financial services, and transportation each reported more than double the prior year's breach count, driven in part by a dramatic spike in zero-day exploitation, which jumped from a historical norm of under four annual incidents to 110 in 2023. Multiple independent cybersecurity publications confirmed the finding, and IBM's 2024 Cost of a Data Breach Report corroborated the severity trend with the average global breach cost hitting a record .88 million. The surge signals a structural shift in attacker capability, with vulnerability-based intrusion now routine across sectors.

Findings

  • ITRC tracked 3,205 US data compromises in 2023 — a 78% increase over 2022 (1,801 incidents) and a 72% jump over the previous all-time high set in 2021.
  • Zero-day vulnerability exploitation in data breaches surged from historically 1–4 events per year to 110 in 2023, a structural shift that moved zero-days from rare to routine breach drivers.
  • Healthcare, financial services, and transportation each reported more than double their 2022 breach counts, indicating the surge was sector-wide rather than confined to one industry.
  • Over 353 million individuals were affected by 2023 US breaches, though the victim count declined 16% from 2022 — more incidents but more targeted in average scope.
  • IBM's 2024 Cost of a Data Breach Report documented a record $4.88M average global breach cost, a 10% year-over-year increase and the largest annual jump since the pandemic.

Delta Engine result

↔ Divergence Detected — Δ 0.6207 (threshold 0.05)

Evidence quality

avg 39 · min 25 · max 95 · spread 70