2022 seems to be on target for the lowest year of reported breaches by large US corporations

2022 seems to be on target for the lowest year of reported breaches by large US corporations

Feb 15, 2023

‍The number of data breaches reported in the first 6 months of 2022 has put this year on track to be the lowest year of reports in the last 5 years for large [Revenue >2bn] US corporations. By looking at the rate at which data breach events have been reported so far this year, we predict that the number of events reported is expected to be 15-20% of the number of breaches reported in 2021.

Possible causes:

  • Increased reporting delays: But the time to report has shown a decreasing trend over the last 4 years
  • Genuine improvement in cyber defenses preventing data exfiltration
  • Reduction in reporting requirements, or public disclosure prevention

In this analysis we look at all the reported cyber events which involve data exfiltration (data breach), allocated to the year in which the event started. Comparing the number of events reported at each point during the year then gives us an indication for the rate which can be compared between years.