Mega-Breaches Drive 471 Million Victim Notices

The Identity Theft Resource Center reported an estimated 471.2 million data-breach victim notices in the first half of 2026, already exceeding the 297.5 million notices issued during all of 2025. Mega-breaches drove much of the increase, led by the Canvas education-platform compromise, which generated an estimated 275 million notices. The report also identified a rise in malicious insider incidents and warned that AI-assisted vulnerability discovery may increase the pace at which flaws are found and exploited.