TL;DR: The Identity Theft Resource Center recorded over 1.35 billion breach notices sent to individuals in the US in 2024 alone — a figure larger than the entire US population, reflecting how many people receive multiple notices as their data surfaces in more than one breach.
The Identity Theft Resource Center recorded over 1.35 billion breach notices sent to individuals in the US in 2024 alone — a figure larger than the entire US population, reflecting how many people receive multiple notices as their data surfaces in more than one breach.
What the Data Shows
Given the cumulative scale of breach notices over the past decade, most Americans with an email address have very likely had at least some personal information exposed in a breach at some point — the practical question isn't "if" but "which ones," and how you're protecting the accounts that matter most.
Why This Matters
Numbers like these are a reminder that this isn’t a rare event — it’s a routine risk. Checking whether your own information has already been exposed takes 30 seconds and costs nothing.
If this looks similar to something else you've seen, it's worth reading How Many Data Breaches Happened in 2025?.
This pattern shows up elsewhere too — see How Many People Are Affected by Data Breaches Each Year?.
Frequently Asked Questions
What do the numbers actually show?
The Identity Theft Resource Center recorded over 1.35 billion breach notices sent to individuals in the US in 2024 alone — a figure larger than the entire US population, reflecting how many people receive multiple notices as their data surfaces in more than one breach.
What does this mean for you?
Given the cumulative scale of breach notices over the past decade, most Americans with an email address have very likely had at least some personal information exposed in a breach at some point — the practical question isn't "if" but "which ones," and how you're protecting the accounts that matter most.
Where does this data come from?
This data is drawn from ITRC – 2024 Annual Data Breach Report, a primary reporting source for fraud and identity theft data.