Rising Threat of Data Breaches: 70% of Individuals Affected by Third-Party Breaches, Kroll Reports

Overview of Data Breaches in 2026

A troubling trend uncovered in Kroll's latest report suggests that 70% of individuals have suffered from data breaches via third-party services. This statistic, derived from the 2026 Data Breach Outlook, reveals a concerning vulnerability that continues to plague organizations across various sectors.

The Prevalence of Data Breaches

According to the report, 69% of organizations surveyed claimed to have experienced at least one data breach within the past year. More alarmingly, over one-third of these organizations noted multiple breaches, indicating a recurring issue within their cyber defenses. Among these, the financial services sector faced the brunt of the attacks, comprising 20% of the total breaches observed by Kroll.

Kroll's analysis revealed that the technology sector stands as the largest contributor to breaches, affecting a staggering 79% of the individuals impacted overall. This sector's vulnerabilities spotlight the cascading effects a single breach can unleash, potentially jeopardizing the data of numerous businesses relying on the same third-party services.

Challenges of Third-Party Relationships

The report emphasizes the complexity and risks associated with third-party relationships. IT leaders have identified vendor breaches as their primary compliance challenge, with 54% expressing heightened concerns compared to 40% of C-suite executives. This disparity underscores a critical disconnect in understanding the prevalence and impact of such breaches within organizations.

Kroll's Global Head of Breach Notification, Denyl Green, points out that many incidents stem from vulnerabilities in suppliers, software providers, or service partners. Even companies that never engage directly with the vendor can find their customer data compromised due to insufficient security measures on the vendor's part.

Insights for Prevention

The report advocates for organizations to take a proactive stance. Having a clear plan for breach responses and mapping third-party networks can significantly mitigate the repercussions of data breaches. Companies that prepare in advance may not only lower response costs but also enhance their operational resilience during crises.

The Role of Artificial Intelligence

As we usher in an era increasingly influenced by AI, the potential for data breaches expands even further. Kroll anticipates the dual role of AI in future breaches—being used as a tool for attacks while simultaneously requiring robust data governance from companies adopting such technologies. Understanding the interdependencies between suppliers and service providers is critical to minimizing risk exposure.

Cyber Insurance Implications

The ramifications of these breaches extend beyond individual companies, impacting the entire insurance sector. Katherine Keefe, a leading figure in Kroll's Cyber Insurance division, explains how breaches at suppliers can trigger multiple insurance claims from businesses utilizing the same vendor. This ripple effect can dramatically escalate potential losses for cyber insurers, driving them to evaluate how organizations manage their supplier relationships more rigorously.

Conclusion

Ultimately, the Kroll report serves as a clarion call for organizations to bolster their data security measures and reconsider their approach to vendor management. With a significant number of breaches linked to third-party providers, ensuring a secure network through vigilant vendor management and breach preparedness is essential for safeguarding customer data and maintaining organizational integrity in an increasingly interconnected digital landscape.

To learn more about Kroll's breach notification services and their expertise in navigating cyber crises, visit Kroll's Cyber Services.