The US record
What a breach costs in America
The other half of this site totals up what data failures have cost UK organisations. This is the American mirror of it, built from three public records: the breaches companies report to the states, the cyber incidents public companies must disclose to the SEC, and the data cases the FTC brings. All free, all primary sources, rebuilt nightly.
1,653
US data breaches on record
82
public companies disclosed a cyber incident to the SEC
1,190
breaches caused by a cyberattack
582
of those involved ransomware
1,653 breaches
Who got breached, and how
Every breach reported to Washington State — required whenever 500+ residents are affected, which catches most national companies. Cause, scale and how long it took to notice.
82 filings
Told investors they were hacked
Since December 2023, US public companies must report a material cyberattack to the SEC within four business days. This is that filing stream, company by company.
3 recent actions
Made to answer for the data
The Federal Trade Commission's recent enforcement against companies that failed to secure personal data or misused it — with the orders and penalties.
The UK side
Compare with the UK
The same story under a single regulator: every ICO fine and reprimand, by cause and sector. Useful next to the fragmented US picture.
Latest US breaches
All 1,653 →-
ASOS US Sales LLC Unauthorised access · Business
-
Nebraska Orthopaedic Center Unauthorised access · Health
-
Apple American Group LLC and Apple American Group II, LLC Cyberattack · Ransomware · Business
-
Turner Construction Company Cyberattack · Ransomware · Business
-
Baylor Genetics Cyberattack · Ransomware · Health
-
Paylogix, LLC Cyberattack · Ransomware · Business
Latest SEC cyber filings
All 82 →- Park Dental Partners, Inc. (PARK) Form 8-K · Item 1.05 material cybersecurity incident · Roseville, MN
- Nutex Health Inc. (NUTX) Form 8-K · Item 1.05 material cybersecurity incident · Houston, TX
- Amgen INC (AMGN) Form 8-K · Item 1.05 material cybersecurity incident · Thousand Oaks, CA
- River Financial Corp (RVRF) Form 8-K/A · Item 1.05 material cybersecurity incident · Prattville, AL
- River Financial Corp (RVRF) Form 8-K/A · Item 1.05 material cybersecurity incident · Prattville, AL
- River Financial Corp (RVRF) Form 8-K/A · Item 1.05 material cybersecurity incident · Prattville, AL
Largest single breach on record here: Equifax, Inc. — 3,243,664 Washington residents notified in 2017.