The US record
What a breach costs in America
The other half of this site totals up what data failures have cost UK organisations. This is the American mirror of it, built from three public records: the breaches companies report to the states, the cyber incidents public companies must disclose to the SEC, and the data cases the FTC brings. All free, all primary sources, rebuilt nightly.
1,674
US data breaches on record
85
public companies disclosed a cyber incident to the SEC
1,206
breaches caused by a cyberattack
592
of those involved ransomware
1,674 breaches
Who got breached, and how
Every breach reported to Washington State — required whenever 500+ residents are affected, which catches most national companies. Cause, scale and how long it took to notice.
85 filings
Told investors they were hacked
Since December 2023, US public companies must report a material cyberattack to the SEC within four business days. This is that filing stream, company by company.
2 recent actions
Made to answer for the data
The Federal Trade Commission's recent enforcement against companies that failed to secure personal data or misused it — with the orders and penalties.
The UK side
Compare with the UK
The same story under a single regulator: every ICO fine and reprimand, by cause and sector. Useful next to the fragmented US picture.
Latest US breaches
All 1,674 →-
zHealth, Inc. Unauthorised access · Health
-
Cornerstone Staffing Solutions, Inc. Unauthorised access · Business
-
Quatrro Business Support Services, Inc. Cyberattack · Ransomware · Business
-
Hibbett Retail, Inc. Unauthorised access · Business
-
LHC Group, Inc. Cyberattack · Other · Health
-
Bimbo Bakeries USA Cyberattack · Other · Business
Latest SEC cyber filings
All 85 →- Park Dental Partners, Inc. (PARK) Form 8-K · Item 1.05 material cybersecurity incident · Roseville, MN
- Astrana Health, Inc. (ASTH) Form 8-K · Item 1.05 material cybersecurity incident · Alhambra, CA
- Boston Scientific Corp (BSX) Form 8-K · Item 1.05 material cybersecurity incident · Marlborough, MA
- Park Dental Partners, Inc. (PARK) Form 8-K · Item 1.05 material cybersecurity incident · Roseville, MN
- Nutex Health Inc. (NUTX) Form 8-K · Item 1.05 material cybersecurity incident · Houston, TX
- Amgen INC (AMGN) Form 8-K · Item 1.05 material cybersecurity incident · Thousand Oaks, CA
Largest single breach on record here: Equifax, Inc. — 3,243,664 Washington residents notified in 2017.